schwabe.at
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Drupal
- Analytics
-
- Cloudflare Insights
Third-party hosts loaded (5)
- www.lasea.ch×2
- www.laseaxan.be×2
- static.cloudflareinsights.com×1
- www.lasea.com.mx×1
- www.lasea.de×1
Social
DNS records live
- NS
-
- ezra.ns.cloudflare.com
- ligia.ns.cloudflare.com
- MX
-
- 10 schwabe-at.mail.protection.outlook.com
- Verified for
-
Email authentication weak
- SPF
-
v=spf1 mx include:spf.protection.outlook.com ip4:212.227.53.71 ip4:93.191.161.126 ip4:212.86.203.32/28 ip4:212.86.203.192/26 ip4:62.23.225.238 a:mail.schwabe.de a:mail2.schwabe.de -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
WE1
Expires in 38 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.newrelic.com *.acsitefactory.com *.usercentrics.eu *.kairion.de *.doubleclick.net www.google-analytics.com *.maven360.io *.ihreapotheken.de schwabe-group.widen.net *.widencdn.net *.cloudflareinsights.com *.cloudlfare.com *.googletagmanager.com *.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.newrelic.com polyfill.io *.googletagmanager.com *.google-analytics.com cdn.kiprotect.com *.usercentrics.eu *.kairion.de *.kctag.net *.facebook.net *.maven360.io *.ihreapotheken.de ihreapotheken.de *.youtube.com *.adform.net *.doubleclick.net *.cloudflareinsights.com *.cloudlfare.com *.google.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.kairion.de *.ihreapotheken.de ihreapotheken.de; img-src 'self' data: *; media-src 'self' data:; frame-src *; child-src *; connect-src 'self' *.facebook.com *.google-analytics.com *.kairion.de https://schwabe-prod-elastic.1xinternet.de:443 *.maven360.io *.ihreapotheken.de ihreapotheken.de api.ia.de https://schwabe-prod- strict-transport-security
max-age=31536000; includeSubDomains