sport2000.at
HTML metadata
Technology
- Server
- Apache
- CMS
- Gatsby
DNS records live
- NS
-
- ens01.drei.host
- ens02.drei.host
- MX
-
- 0 sport2000-at.mail.protection.outlook.com
- TXT
-
MS=ADF978DC5DBCF166F3A61FD7874DE3F4AEEEB252langdock-verify=gOE9tjj0qZecqQbWCip4A1IxyradEbNYsnyruy5eYTg
- Verified for
-
- Atlassian
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 include:spf.anwr.de include:spf.protection.outlook.com include:_spf.mailcontrol.conova.com include:mailing.sagedpw.at include:spf.mlwrx.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc@anwr-group.com; ruf=mailto:dmarc@anwr-group.compolicy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIuyhMnzTEIP6sEvUoTC7oAHe5vWy4nNNJ6GbNjg9nFuh8Q9vKcIk023iRKH9uqHyM/xG5un5JVbCL… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OHIEnx7Zk+LFIA0ljoAxDi1GYC2QT+BCTWO256c6pmJwR+T7STvv7IzUbLkIWvV3rW/2hwLeCA9yO…
selectors probed - selector1:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 263 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
sameorigin- x-content-type-options
nosniff- content-security-policy
default-src 'none'; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com *.sport2000.at *.googletagmanager.com; script-src 'self' 'unsafe-inline' https://www.youtube.com https://tagmanager.google.com *.googletagmanager.com *.sport2000.at *.facebook.com *.facebook.net *.google.de *.google.at *.google.ch *.google-analytics.com *.sport2000online.at *.doubleclick.net *.google.com; connect-src 'self' https://osmnominatim.exedio.com/ *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.sport2000.at https://homologation-webpayment.payline.com https://homologation-webpayment.payline.com https://api.mangopay.com *.sport2000online.at *.doubleclick.net *.google.com; img-src 'self' data: https://osmgeotiles.exedio.com https://ssl.gstatic.com https://www.gstatic.com *.google-analytics.com *.googletagmanager.com *.sport2000.at *.facebook.com *.facebook.net *.google.de *.google.at *.google.ch ad.doubleclick.net *.sport2000online.at *.doubleclic- strict-transport-security
max-age=31536000