tennislife.at
HTML metadata
Technology
- Server
- nginx
- jQuery
- 1.11.3 known XSS (<3.5)
- Stack
- PHP
- Analytics
-
- Google Tag Manager
- Ads
-
- Google Ads
- Fonts
-
- Google Fonts
Third-party hosts loaded (6)
- fonts.googleapis.com×2
- www.googletagmanager.com×2
- fonts.gstatic.com×1
- widgets.trustedshops.com×1
- www.facebook.com×1
- www.googleadservices.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- alfa.ns.active24.cz
- beta.ns.active24.cz
- MX
-
- 10 mail.tennislife.at
Email authentication partial
- SPF
-
v=spf1 a mx ip4:80.79.28.178 ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=nonepolicy: none (monitoring only) - DKIM
-
- mail:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14y5DUyLVQHtfW0fbDsnr0sUYxWsz8mmM4JP3AFrICtQvcAB+beMKkwnpb83Pmaa3c8eMSCmHHiPpv…
selectors probed - mail:
Certificate (current)
E7
Expires in 31 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- content-security-policy
object-src 'self' *.imedia.cz *.google.com fonts.googleapis.com www.google-analytics.com connect.facebook.net 'unsafe-inline';, upgrade-insecure-requests