zermatt-unplugged.ch
HTML metadata
Technology
- Server
- nginx
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- fonts.googleapis.com×3
- fonts.gstatic.com×1
- www.googletagmanager.com×1
Social
Contact
- Address
- Bahnhofstrasse 84, 3920, Zermatt, Zermatt, CH
DNS records live
- NS
-
- mns01.domaincontrol.com
- mns02.domaincontrol.com
- MX
-
Show 8 MX records
- 10 aspmx.l.google.com
- 100 mxlb.ispgateway.de
- 20 alt1.aspmx.l.google.com
- 20 alt2.aspmx.l.google.com
- 30 aspmx2.googlemail.com
- 30 aspmx3.googlemail.com
- 30 aspmx4.googlemail.com
- 30 aspmx5.googlemail.com
- TXT
-
knowbe4-site-verification=021c18333056290132a9665003cddb05
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:_spf.google.com include:amazonses.com include:spf.mail.hostpoint.ch -allstrict (-all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 64 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
sameorigin- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' map.zermatt-unplugged.ch zermatt-unplugged.ddev.site zermatt-unplugged.ch https://zermatt-unplugged.ch https://www.zermatt-unplugged.ch js.stripe.com fonts.google.com fonts.googleapis.com www.googletagmanager.com *.google-analytics.com www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com www.recaptcha.net cdnjs.cloudflare.com connect.facebook.net googleads.g.doubleclick.net www.googletagmanager.com stats.g.doubleclick.net google-analytics.com *.google-analytics.com; style-src 'self' 'unsafe-inline' js.stripe.com fonts.google.com fonts.googleapis.com vimeo.com youtube.com soundcloud.com; frame-src 'self' 'unsafe-inline' player.vimeo.com map.zermatt-unplugged.ch www.youtube.com youtube.com www.google.com www.googletagmanager.com *.googletagmanager.com api-widget.soundcloud.com soundcloud.com w.soundcloud.com www.recaptcha.net wave.sndcdn.com td.doubleclick.net www.facebook.com facebook.com youtube-nocoo- strict-transport-security
max-age=31536000, max-age=31536000