bvgci.com
HTML metadata
Technology
- Server
- nginx
- CMS
- Gatsby
Third-party hosts loaded (2)
- consus-cms.ridiculousengineering.com×29
- www.google.com×1
Social
Registration
- Registrar
- Network Solutions, LLC
- Created
- 2007-02-14
- Expires
- 2028-02-14 636 days left
- Updated
- 2023-02-16
- Name servers
-
- ns63.worldnic.com
- ns64.worldnic.com
DNS records live
- NS
-
- ns63.worldnic.com
- ns64.worldnic.com
- MX
-
- 10 d151164a.ess.barracudanetworks.com
- 20 d151164b.ess.barracudanetworks.com
- TXT
-
MS=ms63878436
Email authentication partial
- SPF
-
v=spf1 ip4:50.206.61.34 include:spf.protection.outlook.com include:spf.ess.barracudanetworks.com include:_spf.smtp.com include:authsmtp.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 37 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-embedder-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak content type protection
Header values
- referrer-policy
origin- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()- x-content-type-options
nosniff, nosniff- content-security-policy
base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self' https://calendly.com *.google.com *.ridiculousengineering.com localhost:* 0.0.0.0:* *.tourmkr.com tourmkr.com *.biteable.com biteable.com *.youtube.com youtube.com *.vimeo.com vimeo.com *.loom.com loom.com square.link checkout.square.site *.squarecdn.com js.squareupsandbox.com pci-connect.squareupsandbox.com; img-src https: data: localhost:*; object-src 'none'; script-src-attr * 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://*.ridiculousengineering.com https://fonts.googleapis.com; script-src 'strict-dynamic' 'sha256-iP6644zY2L+mBIXVgG4UV1+HiZhZH6blVnGt2Af1UhM=' 'sha256-7UrvX79MdFeJqdc4xYzn9xH6LXjFTLFMmotpXlOnm4g=' 'sha256-EXvCYaQZnG6EriWXu7l5eATC8O4WotpHYkBTewwhv2s=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-H9d634tvntqkycnJixtFBhQjXPjIHSy4X9U09XkfNP8=' 'sha384-IuoNoc6Z2LcbK8qRvVaWVitPNf7gWkYEuC3orhSGb3jnJCmFFX6Eq7qBXiI6s/Ts' 'sha384-jEDjm4oOZcZtaTJ0D1HaGoRVySPT3ZYo- strict-transport-security
max-age=15552000; includeSubDomains, max-age=15768000; includeSubdomains; preload;- cross-origin-opener-policy
same-origin- cross-origin-embedder-policy
unsafe-none- cross-origin-resource-policy
cross-origin