Results foritx.de

9 Successes

• content-security-policy: script-src 'self' https://sst.itx.de 'unsafe-inline' 'unsafe-eval' js.hs-analytics.net js.hs-banner.com js.usemessages.com snap.licdn.com static.zohocdn.com *.cookiebot.com www.googletagmanager.com www.google-analytics.com www.google.com googleads.g.doubleclick.net *.hotjar.com *.googleapis.com *.facebook.net *.facebook.com https://js.hs-scripts.com/7524911.js https://js.hs-banner.com/integrations.js https://js.hs-analytics.net/analytics/1700467200000/7524911.js https://js.hubspot.com/web-interactives-embed.js https://js.hsadspixel.net/fb.js https://js-eu1.hsforms.net https://cdn.jsdelivr.net https://js-eu1.hs-scripts.com https://js-eu1.hubspot.com https://js-eu1.hs-analytics.net https://js-eu1.usemessages.com https://js-eu1.hsadspixel.net https://js-eu1.hs-banner.com; frame-src 'self' https://sst.itx.de *.cookiebot.com www.youtube-nocookie.com player.vimeo.com *.facebook.net *.facebook.com https://global.frcapi.com https://forms-eu1.hsforms.com
• x-content-type-options: nosniff
• x-frame-options: sameorigin
• strict-transport-security: max-age=31536000; includeSubDomains
• referrer-policy: strict-origin-when-cross-origin
• permissions-policy: accelerometer=(self), autoplay=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), keyboard-map=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(self), xr-spatial-tracking=(self)
• cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
• HSTS configured with max-age: 31536000 seconds
• HTTPS is enabled