allnex.com
HTML metadata
Technology
Third-party hosts loaded (2)
- secure.leadforensics.com×2
- allnex.cn×1
Social
Registration
- Registrar
- Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA
- Created
- 2000-05-16
- Updated
- 2025-07-09
- Name servers
-
- ns3.combell.net
- ns4.combell.net
DNS records live
- NS
-
- ns1.combell.eu
- ns3.combell.net
- ns4.combell.net
- MX
-
- 10 mxa-002e3a01.gslb.pphosted.com
- 10 mxb-002e3a01.gslb.pphosted.com
- TXT
-
Show 11 TXT records
MS=ms39322965d365mktkey=aPdxc3KqhZAM6RtqIde1RrsqGPi7xvKkabZBl9Jo8pIxatlassian-domain-verification=Tkbh57iMYZ9uhaeW7Ss51iapBPDJAXGVzVYnA8uv6FITDJ8cEJHRAkq4Otfgov4V_globalsign-domain-verification=_jSBbxgpyuYVzEMo1oxHiFRxkYv6sEZoj41zgw-nM_successfactors-site-verification=Y2UzMGIzYmQxMTgzZjA3YWRkNjJiNTUwNTk1NTI0ZDNkM2FlMTY2OWNiNDRiZjBkNjIzZTk5ZGVjYmU3OGIzZA==mxmIFTg8fWsparQljD0i3GyvAY9gR3DnlMZyphMU8umd5IOGewv5Qf5poW1kONO729WDNdeNQNQtGN8YNuaHrQ==msfpkey=4cqvxb4tey1kjtzd49pkekqnagoogle-site-verification=HPNVzDJ749cQPNSSyZel07jrEoCRD_mpJwTw56uYXX0dc67f31b210ae33c3354cb442cd6ee3c851795a68a6f8131b96b5fb53685517datlassian-sending-domain-verification=d73bde14-cbb8-4d3d-a2c8-2b0ee0553ac688dcb79dbda8f5ecce127ed37dcf618e3234e7187ba89c8553df635e0726fa96
Email authentication strong
- SPF
-
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.compolicy: reject (enforced) - DKIM
-
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rqJe1hR7mo9IiIZ2NvQiWbbRVYAhmlR8QjRBUEvpBeQf6Q5CDHAXdO+ctgFFmEL1x9Pzm1nJUDd/fgJQk… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dJf1ctDVjn+hU+QbL2Gi3OymCWHkYBY9a4DSGvdp0eyis8IJUu4Sg1cSHKcBIwJIBJ/FKe8RUbT60WJZ9…
selectors probed - k2:
Certificate (current)
Go Daddy Secure Certificate Authority - G2
Expires in 156 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()- x-content-type-options
nosniff- content-security-policy
default-src * 'unsafe-inline'; img-src * data: ; script-src * 'unsafe-eval' 'unsafe-inline'; worker-src * blob:; font-src * data:- strict-transport-security
max-age=31536000; includeSubDomains