cfpowertools.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- jQuery
- 3.7.1
- Analytics
-
- Google Analytics
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (12)
- ajax.cloudflare.com×1
- btc.u4pay.com×1
- cdnjs.cloudflare.com×1
- embed.videodelivery.net×1
- fonts.googleapis.com×1
- fonts.gstatic.com×1
- gmpg.org×1
- google-analytics.com×1
- googletagmanager.com×1
- gstatic.com×1
- hcaptcha.com×1
- secure.gravatar.com×1
Social
Contact
- Phone
Registration
- Registrar
- Cloudflare, Inc.
- Created
- 2020-11-08
- Expires
- 2026-11-08 158 days left
- Updated
- 2025-10-09
- Name servers
-
- alice.ns.cloudflare.com
- rajeev.ns.cloudflare.com
DNS records live
- NS
-
- alice.ns.cloudflare.com
- rajeev.ns.cloudflare.com
- MX
-
- 1 route3.mx.cloudflare.net
- 59 route1.mx.cloudflare.net
- 97 route2.mx.cloudflare.net
- Verified for
-
Email authentication strong
- SPF
-
v=spf1 a ip4:185.205.244.91 include:_spf.mx.cloudflare.net mx ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; sp=none; rua=mailto:cfpowertools@gmail.com!10m; ruf=mailto:cfpowertools@gmail.com!10m; rf=afrf; pct=100; ri=86400policy: quarantine · sp=none - DKIM
-
- dkim:
v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B91khlKBxS6yhiRvXdG1XLtmcjcM/bwxpyxiI/0CNnZUTnQokHr6XzizYuw8fqVe5ip…
selectors probed - dkim:
Certificate (current)
WE1
Expires in 65 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(), microphone=(), payment=(), autoplay=(), fullscreen=(self)- x-content-type-options
nosniff- content-security-policy
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'- strict-transport-security
max-age=0; includeSubDomains; preload- cross-origin-opener-policy
same-origin-allow-popups- cross-origin-resource-policy
same-site