bundaberg.com
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Social widgets
-
- Twitter Widget
Third-party hosts loaded (6)
- www.googletagmanager.com×3
- translate.google.com×2
- bundaberg.elmotalent.com.au×1
- maps.google.com×1
- platform.twitter.com×1
- www.facebook.com×1
Social
Contact
- Phone
Registration
- Registrar
- CSC Corporate Domains, Inc.
- Created
- 2000-03-16
- Expires
- 2027-03-16 300 days left
- Updated
- 2026-03-12
- Name servers
-
- ns.domainnetwork.se
- ns2.domainnetwork.se
- ns3.domainnetwork.com
DNS records live
- NS
-
- ns.domainnetwork.se
- ns2.domainnetwork.se
- ns3.domainnetwork.com
- MX
-
- 0 bundaberg-com.mail.protection.outlook.com
- TXT
-
Show 29 TXT records
teamviewer-sso-verification=0db97110e81e41bcac80ff143d7bd945MS=ms40380102dvrp1tfhjbt7wtfbf83wqlqs4sbdbmhmzgrqkqyxyq899snl9kj1530n7hdtq68jw97j2m8dsjl932crq89z2c7dhh3mx55nMS=ms55743872_nh9d2al6xz0qskzzmm1qy0av64qe9oi8gbkw749hwxhh2ng6l9xkhlbhgg3v02h_9qsdy4b3d7qm20dzimymslr6pnqg5ydnkgtl9cw4k6s8hmpnbchp4vbddhvtmsvfqzkq98q1wc28qbptlmn2p96xywwcmr5teQ4i/FNMgKzo6/JSVXFkgr2Letwm+X3YN0uBMvAUm8TndXIqZscO7OG0q0X9Dh5LARt+BtSYL5eU7q3F4LlbQ==by0drymx6pkhc6hp2kfgf6wnh4qzljztapple-domain-verification=yryrFAglj6tUcsPk7dll3fs37kryn68913mmjvxyk5203cpdwmn8l2znxd8thf7ngqwsxcphmvzlqs64p54x8hsnd2mg1b89s0fgwj8ng0clzhpr_fw754ndyozbhjxj586vt263297pd0ffslack-domain-verification=vpB1Jxm1Yz4btaNMeUh1o9eZP6c0L8NKSOs0Aohidwxvgqlf967b9mn1rh9zhrk30vzmt6sk2gvvx7r0m2ljv5mk81bss20jg9k5ckgh66lj5sf5ctwg8jlh5hw6gd8jt6l0tyxz31dw1x8984h9n03102658v1h4jv2njfjh3p6qlbymv812tsd5648ttm5dbw5chn63jyj5208d5wyfk90fqhsxp2252mk3zr7google-site-verification=b9zE3qGRsGrkqrLaX2u4Ce4LNwulCJJnhN8DDqswpmM4b2m6r7ym6gr6qllv5r7nzzkwbc8cb6xy3zn0ckhmlcj64cv45b9qwylbf99wv5cm4q835nxhwhjdx07ys4jjp0ylgjrjhl1
Email authentication strong
- SPF
-
v=spf1 ip4:144.125.87.186 include:_spf.createsend.com include:spf.protection.outlook.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; sp=reject; rua=mailto:dmarcreports@bundaberg.com; ruf=mailto:dmarcreports@bundaberg.com; adkim=r; aspf=r; fo=1; pct=100; ri=86400policy: reject (enforced) · sp=reject - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvUh6+guYY69RBRi3GKmAZJntuKIw6l10BrWhccAONGP/6NYy0Eb4syxvq7PqnVnOwWpZfZFdmpAHy… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T8XTHTZKCpsc+pQrNB9ItNVaZKU0n+xdjChxqm/7Dbv4ZdsOtLo0sONUMeF0qno1U7YNQcK072h+h…
selectors probed - selector1:
Certificate (current)
R13
Expires in 75 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- permissions-policy
autoplay=(), accelerometer=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), midi=(), microphone=(), magnetometer=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; connect-src 'self' properties: *.google.com *.googleapis.com *.google-analytics.com *.facebook.com *.yoast.com yoast.com stats.g.doubleclick.net ad.doubleclick.net; font-src data: *; frame-src 'self' *.google.com *.googletagmanager.com www.youtube.com *.facebook.com platform.twitter.com bundaberg.elmotalent.com.au elmosoftware.com.au *.fls.doubleclick.net td.doubleclick.net; img-src data: *; media-src data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.googleapis.com www.youtube.com connect.facebook.net platform.twitter.com/widgets.js s.tribalfusion.com/displayAd.js a.tribalfusion.com bundaberg.elmotalent.com.au elmosoftware.com.au dnn506yrbagrg.cloudfront.net/pages/scripts/0011/9541.js static.hotjar.com/c/hotjar-97405.js static.hotjar.com/c/hotjar-816256.js cdn.jsdelivr.net/npm/promise-polyfill@8/dist/polyfill.min.js; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' data: *.goog- strict-transport-security
max-age=63072000; includeSubDomains