countyofcolusaca.gov
HTML metadata
Technology
- Social widgets
-
- Vimeo Embed
- YouTube Embed
Third-party hosts loaded (5)
- player.vimeo.com×2
- docaccess.com×1
- snapwidget.com×1
- www.facebook.com×1
- www.youtube.com×1
Social
DNS records live
- NS
-
- aliza.ns.cloudflare.com
- vicky.ns.cloudflare.com
- MX
-
- 10 d326471a.ess.barracudanetworks.com
- 20 d326471b.ess.barracudanetworks.com
- TXT
-
bw=aRQkBH8MbT4iwU2gKQkSV1Zmirl6408rMHm2EfnfAwtdv=spf1 mx ?include:servers.mcsv.net include:spf.ess.barracudanetworks.com include:spf.protection.outlook.com include:spf.protection.ukg.com ip4:50.120.16.11 -all
- Verified for
-
- Microsoft 365
- Zoom
Certificates
Loading certificate
HTTP security headers
- present
-
- content-security-policy
- x-content-type-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *