biomedya.com
HTML metadata
Technology
- Server
- nginx
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (4)
- 3wturk.com×1
- ajax.googleapis.com×1
- translate.google.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
Registration
- Registrar
- Realtime Register B.V.
- Created
- 2014-08-09
- Expires
- 2026-08-09 81 days left
- Updated
- 2025-08-05
- Name servers
-
- ns1.3wturk.com
- ns2.3wturk.com
DNS records live
- NS
-
- ns1.3wturk.com
- ns2.3wturk.com
- MX
-
- 10 mail.biomedya.com
Email authentication strong
- SPF
-
v=spf1 a mx ip4:95.216.242.198 ip6:2a01:4f9:2b:250e:0:0:0:2 ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:spam-reports@biomedya.compolicy: quarantine - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucYYwPUIXGjoxTEKBih6vhG86epjxB3K/Qzne0H/tIX8fiS+giZAV18UKPfiLyIeBFo7KJJdCSws9s…
selectors probed - default:
Certificate (current)
E7
Expires in 76 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-resource-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(), microphone=(), camera=(), browsing-topics=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; img-src * data: https:; font-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; frame-src 'self' https:; connect-src 'self' https:;- cross-origin-resource-policy
same-origin
Links to (10)
- 3wturk.com×2
- apple.com×2
- facebook.com×2
- google.com×2
- instagram.com×2
- linkedin.com×2
- pressreader.com×2
- prosigma.net×2
- twitter.com×2
- youtube.com×2