condo-world.com
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Next.js
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- images.ctfassets.net×19
- fonts.googleapis.com×1
- fonts.gstatic.com×1
- resortpropertymanager.com×1
Social
Contact
- Phone
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 1996-04-17
- Expires
- 2028-04-18 698 days left
- Updated
- 2023-03-01
- Name servers
-
- ns29.domaincontrol.com
- ns30.domaincontrol.com
DNS records live
- NS
-
- ns29.domaincontrol.com
- ns30.domaincontrol.com
- MX
-
- 0 condoworld-com01c.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com include:spf.cfdynamics.com include:condo-world.com include:resortpropertymanager.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=nonepolicy: none (monitoring only) - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsLn8ychCoOqfiIDDYoijx25EjcIw0+Hbtfwi/4LtjxRv8F8geJYSs7T3hZKrkE1oKgRawdl3p80wkzme2… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA8omYyRfccZP7tuXwqmSpnPHuKwzvP5WFjp8xdtZBJaOBe2tXdkCZ/tWfgipv1vBS/L2gycf6txvLs6wBxMb8M8…
selectors probed - s1:
Certificate (current)
R13
Expires in 24 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
DENY- permissions-policy
camera=(), geolocation=(), microphone=()- x-content-type-options
nosniff- content-security-policy
base-uri 'self' http://localhost:* http://condoworld.local; form-action 'self' https://*.facebook.com https://*.facebook.net; frame-src https://embed.windy.com https://media9.tripsmarter.com https://birdeye.com https://*.birdeye.com https://*.facebook.com https://*.facebook.net https://*.pinterest.com https://*.google.com https://vercel.live https://www.googletagmanager.com https://*.shift4test.com https://*.flip.to https://*.i4go.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com http://*.bing.com https://vercel.live https://*.ingest.sentry.io http://localhost:* http://condoworld.local https://www.googletagmanager.com https://analytics.google.com https://www.google-analytics.com https://*.flip.to http://*.flip.to https://contact-api.inguest.com https://media.guestdesk.com https://*.keymetric.net http://*.keymetric.net https://*.i4go.com https://s.pinimg.com https://*.facebook.net https://*.facebook.net https://*.pinterest.com https://*.instagram.com https://*.- strict-transport-security
max-age=63072000; includeSubDomains; preload- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
same-origin