indexo.dev

cromacare.com

.com crawl

First seen 2026-04-22 · Last seen 2026-05-13 · ok HTTP/1.1 200 1874 ms crawled 2026-05-16

DE · 64.226.124.240 · AS14061 DigitalOcean, LLC

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
cromacare - CROMA CARE
Description
Login Sign Up Elevate Your Skills in Aesthetic Medicine Expand your knowledge with curated webinars and expert-led training, designed specifically for health care professionals working in aesthetic medicine. Explore our  Webinars & Courses From digital anatomy trainings to injection techniques & treatment protocols - Discover a range
Language
en-US
Generator
WordPress 6.9.4
Canonical
https://cromacare.com/
Feeds

Open Graph

url
https://cromacare.com/
title
cromacare - CROMA CARE
locale
en_US
site name
CROMA CARE
description
Login Sign Up Elevate Your Skills in Aesthetic Medicine Expand your knowledge with curated webinars and expert-led training, designed specifically for health care professionals working in aesthetic medicine. Explore our  Webinars & Courses From digital anatomy trainings to injection techniques & treatment protocols - Discover a range

Technology

Server
nginx
CMS
WordPress
Analytics
  • Google Tag Manager
Social widgets
  • Vimeo Embed

Third-party hosts loaded (2)

  • www.googletagmanager.com×3
  • player.vimeo.com×2

Social

Registration

Registrar
GoDaddy.com, LLC
Created
2025-08-20
Expires
2030-08-20 1552 days left
Updated
2025-08-20
Name servers
  • ns59.domaincontrol.com
  • ns60.domaincontrol.com

DNS records live

NS
  • ns59.domaincontrol.com
  • ns60.domaincontrol.com

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-05-01 to 2026-07-30
Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://cromacare.com/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
script-src * 'self' 'unsafe-inline' 'unsafe-eval' wistia.com youtube.com blob:

Links to (5)

Linked from (1)