biopak.com
HTML metadata
Technology
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (8)
- fonts.googleapis.com×2
- js-ap1.hs-scripts.com×1
- maxcdn.bootstrapcdn.com×1
- pro.fontawesome.com×1
- rum.hlx.page×1
- static.klaviyo.com×1
- www.googletagmanager.com×1
- www.youtube.com×1
Social
Contact
- Phone
Registration
- Registrar
- Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA
- Created
- 2014-08-05
- Expires
- 2026-08-05 77 days left
- Updated
- 2025-08-06
- Name servers
-
- dns1.zaccodigitaltrustlabs.com
- dns2.zaccodigitaltrustlabs.net
- dns3.zaccodigitaltrustlabs.se
- dns4.zaccodigitaltrustlabs.se
DNS records live
- NS
-
- dns1.zaccodigitaltrustlabs.com
- dns2.zaccodigitaltrustlabs.net
- dns3.zaccodigitaltrustlabs.se
- dns4.zaccodigitaltrustlabs.se
- ns1.zaccodns.com
- ns2.zaccodns.se
- MX
-
- 0 biopak-com.mail.protection.outlook.com
- TXT
-
Show 14 TXT records
facebook-domain-verification=7ff525tidr96g2j1rn5e0a4gg5wg7dgoogle-site-verification=HCP-b1W81LlM51vbMyYyuW2tlDGd5SFXRUGValAGcvwworkplace-domain-verification=lnqJCUUcTPxU9gdNthS2j1E14ONP27fastly-domain-delegation-bPfQfrct5Y42BDqM-697643-2023-09-18klaviyo-site-verification=VapC2Zklaviyo-site-verification=YtSBgUklaviyo-site-verification=SSBFPPopenai-domain-verification=dv-U61GiJ9EU4HDXrQbcQmgiNY3klaviyo-site-verification=VyQrauv=verifydomain MS=5033236apple-domain-verification=0dLuPa4uM8kfroJD111ap12lgpsdschtf9c6hh8gr6google-site-verification=kZ4N0C7H4z7N0YKbZQHoXsclca5sIhewkWf-F1mlXLgklaviyo-site-verification=TMPbB5
Email authentication strong
- SPF
-
v=spf1 include:spf.protection.outlook.com include:mktomail.com include:sendgrid.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:nauman@biopak.com.au; ruf=mailto:nauman@biopak.com.au; fo=1; pct=100; adkim=s; aspf=spolicy: quarantine · sp=quarantine - DKIM
-
Show 5 DKIM selectors
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5w/lQfkUvdTz8h+eaabkkl4+PlljAmkg+86T7ucUBMeFOwrfPqV9aRK2Kdz/QBVAt0VviU/o6xj1WaRjnrG… - selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxHPxI1lIxABpo3ZV59y1bdbpMPcY92Bl2ZSkWP27w6/V7eK8FWjSbomNmMK8heuOaMKmApQYXZFVr3OIdoH… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCkwREgHeKIMubAe4SG/t7tcdi8gcFBzQ/rPAxmRQTwHhHldZXadZ8YBiy7PxoGfz97gKqMjoWbhRENAO00//… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ugOSARyzFKXAMqduajUSK3frVhuIW2O4WyUeYgmqo9qToY3AxNf/UCCrBxnk87BmbiJ2NQYwnIMCDxZgm… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc3sR60XTgM/VF8HwktxKb1Oor90HpIXxWNHqigoCAymz593k4huJ21IiwsCWfrphMJBtCQmPKPXiF1IyU…
selectors probed - google:
Certificate (current)
R12
Expires in 40 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
font-src *.typekit.net fonts.gstatic.com use.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: https://www.googletagmanager.com https://fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com pro.fontawesome.com fonts.googleapis.com chat-assets.frontapp.com cdnjs.cloudflare.com static.klaviyo.com store-eflga2hmzx.mybigcommerce.com https://pro.fontawesome.com https://cdnjs.cloudflare.com https://static.klaviyo.com https://store-eflga2hmzx.mybigcommerce.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com portal.zakeke.com live.opayo.eu.elavon.com pi-live.sagepay.- strict-transport-security
max-age=31557600- content-security-policy-report-only
default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 'report-sample'; connect-src 'none'; form-action 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp.threatview.app/report; report-to threatview