ch.com
HTML metadata
Technology
- Server
- openresty
- CMS
- Gatsby
Third-party hosts loaded (5)
- media.springairlines.com×11
- ajax.springairlines.com×3
- appmedia.springairlines.com×1
- castatic.fengkongcloud.cn×1
- static.geetest.com×1
Contact
- Phone
Registration
- Registrar
- Alibaba Cloud Computing (Beijing) Co., Ltd.
- Created
- 1997-06-19
- Expires
- 2033-06-18 2587 days left
- Updated
- 2024-05-15
- Name servers
-
- dns7.hichina.com
- dns8.hichina.com
DNS records live
- NS
-
- dns7.hichina.com
- dns8.hichina.com
- MX
-
- 10 mxbiz2.qq.com
- 5 mxbiz1.qq.com
- TXT
-
google-site-verification=TcSHXZhwf52vhT23qo5b8e2Jcuto0xy7YXbNujz_mCE
Email authentication strong
- SPF
-
v=spf1 include:spf.mail.qq.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:mailauth-reports@qq.compolicy: quarantine - DKIM
- no key found at common selectors
Certificate (current)
TrustAsia TLS Pro RSA CA 2025
Expires in 146 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src 'self' *.springairlines.com *.ch.com wkbrs2.tingyun.com *.growingio.com static.geetest.com;style-src 'self' 'unsafe-inline' *.springairlines.com *.fengkongcloud.cn *.fengkongcloud.com *.geetest.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ch.com *.springairlines.com *.geetest.com *.riskified.com assets.giocdn.com *.fengkongcloud.cn *.fengkongcloud.com; img-src * data:; connect-src 'self' *.springairlines.com *.ch.com wkbrs2.tingyun.com *.riskified.com *.growingio.com *.fengkongcloud.cn *.fengkongcloud.com;font-src 'self' static.geetest.com *.springairlines.com *.fengkongcloud.cn *.fengkongcloud.com;worker-src 'self' blob: *.ch.com;- strict-transport-security
max-age=31536000