werkenbijlidl.be
HTML metadata
Technology
- Server
- nginx
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- OneTrust
Third-party hosts loaded (3)
- www.googletagmanager.com×2
- cdn.cookielaw.org×1
- walls.io×1
Social
DNS records live
- NS
-
- ns.do-ex.com
- ns.do-ex.net
- ns.do-ex.org
- TXT
-
swisssign-check=4SVvVSxh2PA4xOuUtIOHh34TVdoswisssign-check=RXyGZKi6Zhcygs3rEempoLwXlLDNJax0aLPdaPMN65
- Verified for
-
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
SwissSign RSA TLS EV ICA 2022 - 1
Expires in 40 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.lidl.net *.schwarz *.mylidlcareer.co.uk *.career-inspiration.com google.com *.google.com googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com googleusercontent.com *.googleusercontent.com https://connect.facebook.net *.facebook.com facebook.com *.facebook.net facebook.net youtube.com *.youtube.com ytimg.com *.ytimg.com *.cookiebot.com doubleclick.net *.doubleclick.net https://lidl.media01.eu *.pathmotion.com *.pathmotion.io *.onrecruit.net *.kameleoon.eu *.kameleoon.com *.bing.com *.virtualearth.net https://assets.zendesk.com *.linkedin.com linkedin.com *.licdn.com licdn.com *.companymatch.me companymatch.me *.qualifio.com *.qualifioapp.com cdn.cookielaw.org walls.io *.reciteme.com reciteme.com *.jsdelivr.net cdn.jsdelivr.net www.googleadservices.com *.goldenbees.fr click.appcast.io placed-app.com apply.placed-app.com tags.srv.stackadapt.com api.sociallyrecruited.com embed.jochat.ai- strict-transport-security
max-age=31536000 ; preload