onemobility-group.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- cdn-cookieyes.com×3
- www.googletagmanager.com×2
- fonts.googleapis.com×1
- fonts.gstatic.com×1
Social
Registration
- Registrar
- united-domains GmbH
- Created
- 2025-03-05
- Expires
- 2027-03-05 289 days left
- Updated
- 2026-04-29
- Name servers
-
- arvind.ns.cloudflare.com
- cheryl.ns.cloudflare.com
DNS records live
- NS
-
- arvind.ns.cloudflare.com
- cheryl.ns.cloudflare.com
- MX
-
- 10 mx01.hornetsecurity.com
- 20 mx02.hornetsecurity.com
- 30 mx03.hornetsecurity.com
- 40 mx04.hornetsecurity.com
- TXT
-
MS=ms23372067
Email authentication strong
- SPF
-
v=spf1 include:_smtp.udag.de include:spf.protection.outlook.com include:servers.mcsv.net include:spf.hornetsecurity.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:it@onemobility-group.com; ruf=mailto:it@onemobility-group.com; aspf=s; adkim=s; pct=100policy: reject (enforced) - DKIM
-
Show 4 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qzFkZIRGwDoi7qe+KgwHT/+Y5r2N7ZR41wrFuEfpFvWvGjD3oKql4x+YPfRDYolbme0HIA/TwU4dK… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCQLssgLjdk/21weEeHgHICny7Snz1j99Yu2HbyT4woD0oCgvuMPisH0azLDoWVWIbPjFhfTJriyUE2Scw… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2C+xEy6m5lT4EcuGyBD2OhuAIhQRWAEqBqSIbZ7kuyUpynNRgn73TGsKQwuKlyaKcWIcEEKbV60J6Kahq…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 52 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' cdn-cookieyes.com *.googletagmanager.com *.google.com *.gstatic.com; style-src 'report-sample' 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' *.cookieyes.com region1.google-analytics.com *.google.com cdn-cookieyes.com *.csper.io; font-src 'self' fonts.gstatic.com; frame-src 'self' *.google.com; img-src 'self' cdn-cookieyes.com *.googletagmanager.com secure.gravatar.com *.w.org data:; manifest-src 'self'; media-src 'self'; worker-src 'none';- strict-transport-security
max-age=31536000; includeSubDomains; preload