chain-reaction.io
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
Third-party hosts loaded (1)
- www.google.com×3
Social
DNS records live
- NS
-
- armando.ns.cloudflare.com
- ines.ns.cloudflare.com
- MX
-
- 0 chainreaction-io01c.mail.protection.outlook.com
- 30 _dc-mx.1f00f034c9c3.chain-reaction.io
- TXT
-
Show 5 TXT records
cloudhealth=61aea617-eac0-4a18-839e-b0c59bd9e8bagoogle-site-verification=wOAuEaH3NHZHFv7MyYrIbWJg7uXGGzAkEaGNjAdZPooanthropic-domain-verification-qbfdvx=NZPjM8jOFUt6TSQOO3EJHvjdMatlassian-domain-verification=YfW8WQc/oMiaeq97pau7t2yWkybIVp7jVAG328FDCy9lPrAjUwmmq5Z0dZBYM6Yebc3d227a-b483-4034-9893-7d85ade5b8b0
Email authentication partial
- SPF
-
v=spf1 mx ip4:66.96.128.0/18 include:spf.protection.outlook.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClHVPE6s3hqG+PG7nPhwYg5eVAKzoBIGCUmF9HTlIr5szBpXt/Ni3030tZJFTXRgxMhsBY5muSFDqY24+t2d… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 37 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self'; block-all-mixed-content; default-src 'self'; script-src 'self' 'nonce-2f60229de4' 'nonce-b6cc83b333' 'nonce-6a439d4108' 'nonce-1cd8020d5d' 'nonce-b6cc83b333' 'nonce-78ca3acc1a' 'nonce-9b3113b7ae' 'nonce-f281688772' 'nonce-047bd6a473' 'nonce-a4888d5451' 'nonce-e0c80d641a' 'nonce-6cce388fb7' 'nonce-f6afe03484' 'nonce-69222786db' 'nonce-3c28ec29e3' 'nonce-9f3f617420' 'nonce-17b623a30a' 'nonce-b2c58a4a63' 'nonce-45d297aeb7' 'nonce-db63cf8106' 'nonce-941ea44e57' 'nonce-ce714427ae' 'nonce-2f184e68fb' google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com tagmanager.google.com *.tagmanager.google.com *.youtube.com youtube.com *.comeet.co comeet.co *.gstatic.com gstatic.com *.userway.org snap.licdn.com; style-src 'self' 'unsafe-inline' tagmanager.google.com *.googletagmanager.com *.userway.org *.comeet.com; object-src 'none'; frame-src 'self' data: *.youtube.com youtube.com *.youtube-nocookie.com youtube-nocookie.com *.comeet.co comeet.- strict-transport-security
max-age=31536000; includeSubDomains; preload