ao-delivery.com
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- fonts.googleapis.com×2
- widget.trustpilot.com×1
- www.googletagmanager.com×1
Contact
- Phone
Registration
- Registrar
- Abion AB
- Created
- 2019-03-15
- Expires
- 2027-03-15 300 days left
- Updated
- 2026-03-08
- Name servers
-
- a.portsdns.se
- b.portsdns.net
DNS records live
- NS
-
- a.portsdns.se
- b.portsdns.net
- TXT
-
Probely=5489f86b-6f8b-4eae-aec2-ea614d4510a7
Email authentication no MX
- SPF
-
v=spf1 -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:bb1e92aabadf131@rep.dmarcanalyzer.com; ruf=mailto:bb1e92aabadf131@for.dmarcanalyzer.com; fo=1;policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 77 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(); midi=(); notifications=(); push=(); sync-xhr=(); microphone=(); camera=(); magnetometer=(); gyroscope=(); speaker=(self); vibrate=(); fullscreen=(self); payment=();- x-content-type-options
nosniff- content-security-policy
script-src 'unsafe-eval' 'self' 'unsafe-inline' cdnjs.cloudflare.com code.jquery.com widget.trustpilot.com www.google.com connect.facebook.net maps.googleapis.com static.hotjar.com www.googletagmanager.com www.gstatic.com; script-src-elem 'self' 'unsafe-inline' cdnjs.cloudflare.com code.jquery.com connect.facebook.net maps.googleapis.com script.hotjar.com static.hotjar.com widget.trustpilot.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com blob: assets.adobedtm.com edge.eu1.fullstory.com; style-src 'self' fonts.googleapis.com maxcdn.bootstrapcdn.com 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.bunny.net cdn.honey.io; style-src-attr 'unsafe-inline'; img-src 'self' data: maps.gstatic.com www.facebook.com www.google-analytics.com ao-jobs-wpe.tdrstaging.co.uk blob: conv.indeed.com maps.googleapis.com www.googletagmanager.com secure.gravatar.com plugin-updates.wpengine.com prodaoitblog.wpengine.c- strict-transport-security
max-age=31536000; includeSubDomains; preload, max-age=63072000