eventconnectsports.com
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Ads
-
- Meta Pixel
Third-party hosts loaded (7)
- cdn.jsdelivr.net×1
- cdnjs.cloudflare.com×1
- code.jquery.com×1
- connect.facebook.net×1
- static.ada.support×1
- www.google.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2022-03-25
- Expires
- 2027-03-25 309 days left
- Updated
- 2022-10-01
- Name servers
-
- ns07.domaincontrol.com
- ns08.domaincontrol.com
DNS records live
- NS
-
- ns07.domaincontrol.com
- ns08.domaincontrol.com
- TXT
-
google-site-verification=Pck74QN3nAwCPx7OPL6ylnWa8DM-cx8GnHgyYd2FN0g
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 81 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-eval' data: *.gstatic.com *.google-analytics.com *.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.googleadservices.com *.googletagmanager.com *.doubleclick.net *.visualwebsiteoptimizer.com *.gstatic.com bat.bing.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: *.gravatar.com bat.bing.com; font-src 'self' data: https:; connect-src 'self' *.datadoghq.com *.linkedin.com *.eventconnect.io *.bamboohr.com *.ada.support *.yoast.com *.facebook.com *.google.com *.google-analytics.com *.yoast.com wss://*.hotjar.com *.hotjar.io *.hotjar.com *.hubspot.com *.hubapi.com *.hsforms.com wss://ws22.hotjar.com/api/v2/client/ws stats.g.doubleclick.net https://cdnjs.cloudflare.com *.hotjar.com; media-src 'self' https:; object-src 'self'; frame-src 'self' *.doubleclick.net *.youtube.com *.jotform.com *.eventconnect.io *.ada.support xd.adobe.com/ www.google.com www.googletagmanager.com connect.facebook.net www.facebook.com bid.g.double- strict-transport-security
max-age=15552000; includeSubdomains;