oralb.se
HTML metadata
Technology
- CDN
- Azure Front Door
- CMS
- Next.js
- Analytics
-
- Google Analytics
- Google Tag Manager
- Cookie consent
-
- OneTrust
Third-party hosts loaded (6)
- images.ctfassets.net×33
- apps.bazaarvoice.com×1
- cdn.cookielaw.org×1
- cdn.pricespider.com×1
- www.google-analytics.com×1
- www.googletagmanager.com×1
DNS records live
- NS
-
- ns1-05.azure-dns.com
- ns2-05.azure-dns.net
- ns3-05.azure-dns.org
- ns4-05.azure-dns.info
- TXT
-
oralb-pgone-se-sv-prod.azurewebsites.net
- Verified for
-
Email authentication no MX
- SPF
- not published
- DMARC
-
v=DMARC1; p=none; fo=1; ri=3600; rua=mailto:procter-gamble@rua.dmp.cisco.com; ruf=mailto:procter-gamble@ruf.dmp.cisco.compolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA OV R40
Expires in 315 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src 'self'; child-src blob:; media-src * 'self' data: https: blob:; style-src 'self' 'unsafe-inline' *.pricespider.com *; img-src * 'self' data: https: blob: *.pricespider.com; script-src * data: *.pricespider.com https://*.rudderlabs.com/ blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline' https://*.rudderstack.com/; font-src * data: https:; frame-src *;- strict-transport-security
max-age=63072000; includeSubDomains; preload
Links to (14)
- az-oralb.it×1
- oralb.co.uk×1
- oralb.com×1
- oralb.cz×1
- oralb.de×1
- oralb.dk×1
- oralb.es×1
- oralb.fi×1
- oralb.fr×1
- oralb.nl×1
- oralb.no×1
- oralb.pl×1
- oralb.pt×1
- oralbarabia.com×1
Linked from (9)
- oralb.fi×1
- oralb.pt×1
- az-oralb.it×1
- oralb.pl×1
- oralb.cz×1
- oralb.nl×1
- oralb.dk×1
- oralb.no×1
- oralb.com.tr×1