blueabatherapy.com
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Ads
-
- TikTok Pixel
- Fonts
-
- Google Fonts
Third-party hosts loaded (7)
- fonts.googleapis.com×3
- www.googletagmanager.com×2
- analytics.tiktok.com×1
- app.splithero.com×1
- cdn.livechatinc.com×1
- fonts.gstatic.com×1
- scripts.iconnode.com×1
Social
Contact
- Phone
- Address
- 3815 River Crossing Parkway, Suite 100, 46240, Indianapolis, Indiana, USA
Registration
- Registrar
- NameCheap, Inc.
- Created
- 2021-05-07
- Expires
- 2028-05-07 718 days left
- Updated
- 2026-05-07
- Name servers
-
- ns1.giowm1037.siteground.biz
- ns2.giowm1037.siteground.biz
DNS records live
- NS
-
- ns1.siteground.net
- ns2.siteground.net
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
google-site-verification=Dh4plGIMLJMRsBwUGQTbFFaEjORTUUpREIM4P-PLzjI
Email authentication partial
- SPF
-
v=spf1 mx include:_spf.google.com ip4:209.85.220.41 include:_spf.salesforce.com include:blueabatherapy.com.spf.auto.dnssmarthost.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarcreports@blueabatherapy.compolicy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4iVOBN+ipzKlJxpt3wwLLt1PaGbdMBTIuDYkrx0uwKfQJdgWSOaHEzaibh7MSmKKlaEnDe+/GiRsDnvk17U… - google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCd+hsrR00cp5TZUlWKR3GLNp41beVCoCE7rOOGuGqUHQBVF+4cUgav6z5xTFXElmkvT6MIvBfIjvHMq2UNl7…
selectors probed - default:
Certificate (current)
R13
Expires in 34 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src * data: 'unsafe-inline' 'unsafe-eval';, default-src * data: 'unsafe-inline' 'unsafe-eval';- strict-transport-security
max-age=31536000; includeSubDomains; preload