cornerstonecapital.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (4)
- www.googletagmanager.com×2
- api.glia.com×1
- cds-sdkcfg.onlineaccess1.com×1
- www.google.com×1
Social
Contact
- Phone
- Address
- st Loop South, Suite 700, Houston, Texas 77027
Registration
- Registrar
- Cloudflare, Inc.
- Created
- 1996-08-14
- Expires
- 2031-08-13 1911 days left
- Updated
- 2023-10-09
- Name servers
-
- jim.ns.cloudflare.com
- tina.ns.cloudflare.com
DNS records live
- NS
-
- jim.ns.cloudflare.com
- tina.ns.cloudflare.com
- MX
-
- 10 mxa-005e1901.gslb.pphosted.com
- 10 mxb-005e1901.gslb.pphosted.com
- TXT
-
Show 8 TXT records
076fj6ykrn3y7nrf9wwsd6syxgvtlz07_8u8m75woisqkkg6una81qq0bk9x53fj_kei1uclrr1s5l55iiy0m777d2egmyjuatlassian-domain-verification=3E1mV8fTsZFIIhi/t7zOKV3je3b4ZVQynaFe9GdgTb6nhCS1yFrGFs63BBjHk8j8e2ma-verification=dr8fbgoogle-site-verification=PKhB-jjsHCz5ZvIgBgU2I1J6YKAZRfxSDJMy4bKcrAshqs3imtjnqjrl9ea3c84g3kbe3oq2en3dj7na3ugv8rip52bjq3t
Email authentication strong
- SPF
-
v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.emailpolicy: reject (enforced) - DKIM
-
Show 5 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4L9G5tmLSTOrWLH76+d3rYMx5wHQC+gcPWBT0ULYVptopaJMocCO+tQ7poEl0zy1F7JKaZFMB3if9… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8bQ5auTvJ1fSpEqK1ms0b7JtSJU+NtmfSzmv+ZjeQ8tWw2CVjyloq2ukup519q53PB+mwIe9XLeXA… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1C3N6xhT/TckxhmHXCEDeo/HIdLJo+3+HAgAqpVHcIXmFUBO8lBsHRdiI9YKOeH2fEC1NJQF8syntW5fx… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FZ9b+H14SPNY7TVU6df+hn6OnByhK8y0SzkCcbIGKp/7pH/3qAAbDSEcXjNhUXM54MntK7cg13VruqwRP… - smtpapi:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwf…
selectors probed - selector1:
Certificate (current)
E7
Expires in 67 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
Header values
- permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.cornerstonecapital.com *.houseloan.com https://fonts.googleapis.com 'unsafe-inline'; script-src 'self' *.cornerstonecapital.com *.houseloan.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' *.cornerstonecapital.com *.houseloan.com https://fonts.gstatic.com *.fontawesome.com *.typekit.net data:; worker-src 'self' *.cornerstonecapital.com *.houseloan.com blob:; script-src-elem 'self' *.cornerstonecapital.com *.houseloan.com https://www.googletagmanager.com *.clarity.ms https://cds-sdkcfg.onlineaccess1.com https://use.typekit.net https://api.glia.com https://www.google.com https://fonts.googleapis.com https://www.gstatic.com https://*.salemove.com https://kit.fontawesome.com https://cdn.jsdelivr.net https://code.jquery.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' *.cornerstonecapital.com *.houseloan.com https://secure.gravatar.com https://p.typekit.net https://claritystatic.blob.core.windows.net https://plugin-updates.wpengine.co- strict-transport-security
max-age=63072000; includeSubDomains; preload