r-bag.hu
HTML metadata
Technology
- Server
- Apache
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- www.r-bag.hu×89
- fonts.googleapis.com×1
- maps.googleapis.com×1
- purl.org×1
Social
Contact
DNS records live
- NS
-
- ans0.telekom.hu
- ans1.telekom.hu
- MX
-
- 10 mail.r-bag.hu
- TXT
-
MS=4BC2C6DABFDD5C9CD53C8CF4B4DD3545B828A209
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 mx:r-bag.hu ip4:195.228.40.114no all qualifier - DMARC
-
v=DMARC1;p=none;rua=mailto:dmarc-reports@r-bag.hupolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 27 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src * data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.facebook.com http://*.facebook.com https://*.facebook.net http://*.facebook.net https://*.fbcdn.net http://*.fbcdn.net http://*.twitter.com https://*.twitter.com http://*.google.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com https://*.google.com http://*.google-analytics.com https://*.google-analytics.com https://*.doubleclick.net http://*.doubleclick.net https://*.googleadservices.com http://*.googleadservices.com http://*.schema.org https://*.schema.org http://*.w3.org https://*.w3.org http://*.googletagmanager.com https://*.googletagmanager.com http://*.ampproject.org https://*.ampproject.org; style-src 'unsafe-inline' *, default-src * data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.facebook.com http://*.facebook.com https://*.facebook.net http://*.facebook.net https://*.fbcdn.net http://*.fbcdn.net http://*.twitter.com https://*.twitter.co- strict-transport-security
max-age=31536000; includeSubDomains