chooseveg.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (7)
- file-cdn.mercyforanimals.org×10
- common.mercyforanimals.org×3
- mfa.cachefly.net×3
- fonts.googleapis.com×2
- www.googletagmanager.com×2
- cdnjs.cloudflare.com×1
- mymfa.mercyforanimals.org×1
Social
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2003-05-15
- Expires
- 2027-02-11 267 days left
- Updated
- 2025-02-11
- Name servers
-
- clyde.ns.cloudflare.com
- leah.ns.cloudflare.com
DNS records live
- NS
-
- clyde.ns.cloudflare.com
- leah.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
google-site-verification=GmtFP2xeHmLbuaGX3z-WMJsoQ0j0yDd4GM9Mqltf_Kwgoogle-site-verification=ZQX8XsDePrPFWGaISC1boZS1CYLgzlYRiF2eAz6lgp4v=spf1 include:_spf.google.com include:mailgun.org ip4:192.254.121.248 ~all
Certificate (current)
WE1
Expires in 59 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=*,autoplay=*,clipboard-write=*,encrypted-media=*,fullscreen=*,geolocation=(self),gyroscope=*,picture-in-picture=*,web-share=(self),payment=("https://act.mercyforanimals.org")- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests;default-src 'self';script-src 'self' 'unsafe-inline' file-cdn.mercyforanimals.org file-stg.mercyforanimals.org mfa.cachefly.net mfacdn.cachefly.net common.mercyforanimals.org act.mercyforanimals.org act.escolhaveg.com.br assets.gospringboard.io doublethedonation.com tgbwidget.com js.dev.shift4.com cdnjs.cloudflare.com cdn.jsdelivr.net www.google.com www.gstatic.com code.jquery.com ajax.googleapis.com kit.fontawesome.com use.fontawesome.com player.vimeo.com www.youtube.com www.youtube-nocookie.com youtube.com youtube-nocookie.com platform.twitter.com www.instagram.com public.tableau.com connect.facebook.net www.tiktok.com *.tiktokcdn-us.com *.ttwstatic.com go.mercyforanimals.org pi.pardot.com bat.bing.com snap.licdn.com cdn.optimizely.com static.hotjar.com script.hotjar.com static.ads-twitter.com googletagmanager.com tagmanager.google.com *.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net www.googletagmanager.com www.google-analytics.co- strict-transport-security
max-age=31536000; includeSubDomains