ambit.co
HTML metadata
Technology
- CDN
- Cloudflare
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- fonts.googleapis.com×2
- af661eb2-pm-assets-cdn.s3.amazonaws.com×1
- fonts.gstatic.com×1
- www.googletagmanager.com×1
Social
Contact
DNS records live
- NS
-
- amanda.ns.cloudflare.com
- bruce.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 12 TXT records
google-site-verification=bdx1pesVNOEa_IMlJ38L2pGaNco12KrKHBudP6QILdUv=BIMI1; l=https://www.ambit.co/_helperapps/bimi.jpg; a=;AYd16MVtAj7fNbfMv+F3LHRE9wAr0WnuTtRGFbxlems=MS=ms21544819MS=ms63049544MS=ms68222455amazonses:+p8xdUvc8GbPPG29zNEGILOc5xuAB4cyL2hOMXC+g0I=amazonses:x51WVGPGJqJ1Vcg9AiVmoV/YQGS1HL+JUDMv4yp2PKo=apple-domain-verification=l49Yb3E1fZmgl1xngoogle-site-verification=EJI9Pma5SQq8aMRzT8dH0C_iumG84ptShorgQipYHP4google-site-verification=QZhZ65X4UfnAhV7GjcCPgtDZePDAf5_ukOiv92vNeuIgoogle-site-verification=WnrMUQv8n9vmJWS-YuJHW34cTqS-UuxgrXVllS_2ikA
Email authentication strong
- SPF
-
v=spf1 ip4:167.89.51.251 ip4:49.248.249.46 ip4:123.252.205.179 ip4:35.154.71.249 ip4:182.71.132.74 ip4:3.7.41.184 ip4:182.71.4.24 ip4:182.71.4.27 ip4:15.207.181.0 ip4:13.126.97.168 ip4:180.179.30.81 ip4:182.71.4.25 ip4:35.200.215.65 ip4:15.206.222.80 ip4:18.185.175.169 ip4:123.252.205.185 include:_spf.google.com include:sendgrid.net include:ncfp.asia include:in-iwc-spf.icewarpcloud.in ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarc@ambit.co; pct=100policy: quarantine - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCw3mhJBRMoo4hVYx4l9m5YEPb+Nr6p7zRj0zjwdZ+SxxiMqIhUky0Wwz/imjhwYadfmh6f+IgKEvDBj72FWr… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqeJwyQMVLSdnoQEpYdcpy6tfzdbhKLzb8kk1aiAKuyEETK9ZZ2utyHy2qt+q4oQGsMwrWVYpWvqkj7wzr… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoUSxyETlYlAy82YTM4bXC238Mc0k8ebn5TG5TbJXXsi7ldUEpNmpJZwf5FOBuTU0TEZzewqFSGQrqLCmS…
selectors probed - google:
Certificate (current)
GlobalSign RSA OV SSL CA 2018
Expires in 28 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing frame protection
- missing content type protection
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin- content-security-policy
script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://af661eb2-pm-assets-cdn.s3.amazonaws.com;script-src-attr 'unsafe-inline';img-src 'self' data: https://img.youtube.com https://www.google.co.in https://www.google-analytics.com;default-src 'self' data: https://www.googletagmanager.com https://analytics.google.com https://stats.g.doubleclick.net;frame-src 'self' https://www.youtube.com youtube.com https://youtube.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests- strict-transport-security
max-age=31536000; includeSubDomains; preload, max-age=31536000; includeSubDomains; preload