sdworx.es
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Drupal
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (28)
- cdn.sdworx.com×3
- country-cms.prd.sdworx.com×3
- p.typekit.net×2
- tags.sdworx.com×2
- www.sdworx.be×2
- www.sdworx.com×2
- go.sdworx.com×1
- web.cmp.usercentrics.eu×1
- www.sdworx.at×1
- www.sdworx.ch×1
- www.sdworx.co.uk×1
- www.sdworx.cz×1
- www.sdworx.de×1
- www.sdworx.dk×1
- www.sdworx.fi×1
- www.sdworx.fr×1
- www.sdworx.hr×1
- www.sdworx.hu×1
- www.sdworx.ie×1
- www.sdworx.it×1
- www.sdworx.lu×1
- www.sdworx.nl×1
- www.sdworx.no×1
- www.sdworx.pl×1
- www.sdworx.ro×1
- www.sdworx.rs×1
- www.sdworx.se×1
- www.sdworx.si×1
Social
DNS records live
- NS
-
- ns1.eurodns.com
- ns2.eurodns.com
- ns3.eurodns.com
- ns4.eurodns.com
- Verified for
-
- GlobalSign
- Meta
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
GlobalSign RSA OV SSL CA 2018
Expires in 157 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
block-all-mixed-content; default-src 'self' blob: https://*.wistia.com https://*.wistia.net; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://use.typekit.net https://www.googletagmanager.com cdn.cookielaw.org *.sdworx.com *.pardot.com a458c8fcc5c8447d898446e84c87217b.js.ubembed.com www.google-analytics.com assets.ubembed.com cdn.landbot.io connect.facebook.net *.clarity.ms bat.bing.com snap.licdn.com *.firebaseio.com www.googleoptimize.com *.googleapis.com https://assets.calendly.com https://web103.reachmee.com https://tracking.intentsify.io https://secure.norm0care.com https://webeo-web-content.s3-eu-west-1.amazonaws.com https://static.landbot.io https://www.youtube.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://secure.agile-company-365.com https://cdn.leadinfo.net https://form.jotform.com https://*.hotjar.com https://optimize.google.com my.visme.co https://*.skedify.io *.sleeknote.com *.visualwebsiteoptimizer.com app.vwo.com ht- strict-transport-security
max-age=63072000