aliss.org
HTML metadata
Technology
- CDN
- Azure Front Door
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (7)
- unpkg.com×3
- cdnjs.cloudflare.com×2
- apis.google.com×1
- app-script.monsido.com×1
- monsido-consent.com×1
- use.typekit.net×1
- www.browsealoud.com×1
Social
Registration
- Registrar
- Gandi SAS
- Created
- 2010-03-16
- Expires
- 2027-03-16 299 days left
- Updated
- 2026-01-10
- Name servers
-
- ns3-01.azure-dns.org
- ns1-01.azure-dns.com
- ns2-01.azure-dns.net
- ns4-01.azure-dns.info
DNS records live
- NS
-
- ns1-01.azure-dns.com
- ns2-01.azure-dns.net
- ns3-01.azure-dns.org
- ns4-01.azure-dns.info
- MX
-
- 0 aliss-org.mail.protection.outlook.com
- TXT
-
1b3f9gqf77cntag7f7b3i4618shgd52ks6fu0sm7irf1ugqnhjkf0BDD4544BD19E8AF0D79EF79E5B8E200FA762E5F7E6E44F2AE3663589AC2DF00.
- Verified for
-
- Microsoft 365
Email authentication weak
- SPF
-
v=spf1 include:spf.protection.outlook.com -allstrict (-all) - DMARC
- not published
- DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLzs0nbCeapy7S1vDBB2UupymTY6ixP0p/oXmREobyC2ara+J3aXyCIIzoaK+2d+MQ1Rvjg9bYR4txHGyT… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfg+9YqIzb5fmiQepQ66MNQdFU5GuCIltYcu4nNZaS3zc81c9fOYm+K3oaJ4Kgwf4+3Zfwek918ou5Q4P2…
selectors probed - s1:
Certificate (current)
GeoTrust TLS RSA CA G1
Expires in 92 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
sameorigin- permissions-policy
accelerometer=(), camera=(), gyroscope=(), magnetometer=(), payment=(), usb=()- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests; default-src 'self' api.crownpeak.net dqm.crownpeak.com; script-src 'self' 'unsafe-inline' static.hotjar.com script.hotjar.com pagecorrect.monsido.com heatmaps.monsido.com monsido-consent.com app-script.monsido.com api.crownpeak.net dqm.crownpeak.com cc.cdn.civiccomputing.com cookiehub.net maps.googleapis.com kit.fontawesome.com use.typekit.net www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com eastprodcdn.azureedge.net tagmanager.google.com plus.browsealoud.com www.browsealoud.com speech.speechstream.net www.googletagmanager.com www.google-analytics.com apis.google.com wikisum.texthelp.com https://unpkg.com; connect-src 'self' wss: largemp3.speechstream.net *.hotjar.com *.hotjar.io api.aliss.local dacs-api.aliss.org api-test.aliss.org api.aliss.org admin.aliss.local dacs-admin.aliss.org admin-test.aliss.org admin.aliss.org cms.aliss.local dacs-test.aliss.org public-test.aliss.org www.aliss.org tracking.monsido.com pagecorrect.monsido.c- strict-transport-security
max-age=63072000; includeSubdomains; preload