yutong.it
HTML metadata
Technology
- Server
- nginx
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (2)
- web.cmp.usercentrics.eu×1
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records
- CNAME
-
- france-alb-1150538779.eu-west-3.elb.amazonaws.com
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificates
Loading certificate
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- checked over plain HTTP
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.yandex.ru yandex.ru *.alicdn.com *.baidu.com *.bdimg.com googleads.g.doubleclick.net google.com *.google.com *.gstatic.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.amap.com *.qq.com res.wx.qq.com *.weibo.cn *.pstatp.com *.toutiao.com *.bcebos.com *.bdstatic.com *.doubleclick.net *.g.doubleclick.net *.qlogo.cn cdn-weixin-001.oss-cn-beijing.aliyuncs.com wsu.t3315.com *.dmarket-ing.com:* *.53kf.com:* *.zoosnet.net:* *.bytegoofy.com:* *.yutong.it:* *.yutong.com:* *.usercentrics.eu:* *.clarity.ms:*, frame-ancestors *.yutong.com *.yutong.it- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (10)
- facebook.com×1
- instagram.com×1
- linkedin.com×1
- twitter.com×1
- wa.me×1
- youtube.com×1
- yutong.com×1
- yutong.com.es×1
- yutong.fi×1
- yutong.fr×1
Linked from (5)
- pullmanweb.it×1
- yutong.fi×1
- yutong.fr×1
- yutong.com.es×1
- yutong.com×1