designhooks.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Ads
-
- Google AdSense
Third-party hosts loaded (3)
- ajax.googleapis.com×2
- gmpg.org×1
- pagead2.googlesyndication.com×1
Social
DNS records live
- NS
-
- kim.ns.cloudflare.com
- pete.ns.cloudflare.com
- TXT
-
ca3-8129b899e27146b693ac027a51922480ca3-fb7ddced9fe14343bc56dd8a66e36d12
Certificate (current)
WE1
Expires in 43 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(), microphone=(), camera=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com cdn.jsdelivr.net www.googletagmanager.com www.google-analytics.com js.stripe.com js.braintreegateway.com assets.braintreegateway.com *.paypal.com www.paypalobjects.com blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net; font-src 'self' fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' blob: *.dashboardpack.com *.pages.dev js.stripe.com *.braintreegateway.com *.paypal.com; frame-ancestors 'self';- strict-transport-security
max-age=31536000; includeSubDomains