canneslions.com
HTML metadata
Technology
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- images.ctfassets.net×11
- transcend-cdn.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
Registration
- Registrar
- Amazon Registrar, Inc.
- Created
- 1996-12-09
- Expires
- 2026-12-08 201 days left
- Updated
- 2025-11-03
- Name servers
-
- ns-1351.awsdns-40.org
- ns-1995.awsdns-57.co.uk
- ns-317.awsdns-39.com
- ns-880.awsdns-46.net
DNS records live
- NS
-
- ns-1351.awsdns-40.org
- ns-1995.awsdns-57.co.uk
- ns-317.awsdns-39.com
- ns-880.awsdns-46.net
- MX
-
- 10 us-smtp-inbound-1.mimecast.com
- 20 us-smtp-inbound-2.mimecast.com
- TXT
-
Show 7 TXT records
OAGKwg3aaiUACHPFVeNICGwc0ymXzoQ8AYrRFPdod8pkj2b6jAE1jwiv+gxul+NvwVZvSg0SMGqeiCwt0KEbeQ==amazonses:EOOaoOx2LG1q/n5pP/X2OXelM0m7itpL7OaocZwynuw=amazonses:gw8n05KPPr4vMG9j6p3LQFab46dOp3HEi6oAGYFZSWc=clq4d56n4fhlflhx8bxjlphr6qgd3qb0mandrill_verify.cld4DoccVLgIk7NpooC-iAprowly-verification=8c4c9ac9f9156236d2ff8d2dfc3b0b58d743076f37fe7288348ca2fa344ecac50ed1fe018a9ce4c16b267a47aca61642ac452d7737
- Verified for
-
- Dropbox
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:us._netblocks.mimecast.com include:mktomail.com include:_spf.salesforce.com include:amazonses.com include:_spf.qualtrics.com include:servers.mcsv.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc-reports@canneslions.com; ruf=mailto:dmarc-reports@canneslions.com; adkim=r; aspf=r; fo=1; pct=100; sp=none;policy: none (monitoring only) · sp=none - DKIM
-
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VzsoO79PM0PtNafV4bT9gk+g/8j8fgB2feTBeiFfpP0S5uOoM2Kfp7uzN9kUFVXJjcq7DQwVcCdBXpt7Z… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCj3GUi3tYSQY/NbY7RoZffd1TAWMDIQBQyDhX8UrHXdhVduWkBc+KAGCa12aFU58klX2nNrG7kEC9SAsBbLPgGmV…
selectors probed - k2:
Certificate (current)
Amazon RSA 2048 M04
Expires in 168 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src https: data: blob: wss:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; script-src-elem https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; frame-ancestors https://app.contentful.com;- strict-transport-security
max-age=63072000; includeSubDomains; preload