geltor.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (5)
- js.hs-scripts.com×2
- use.typekit.net×2
- www.googletagmanager.com×2
- ajax.googleapis.com×1
- px.ads.linkedin.com×1
Social
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2016-06-08
- Expires
- 2026-06-08 19 days left
- Updated
- 2024-06-08
- Name servers
-
- ns73.domaincontrol.com
- ns74.domaincontrol.com
DNS records live
- NS
-
- ns73.domaincontrol.com
- ns74.domaincontrol.com
- MX
-
- 0 geltor-com.mail.protection.outlook.com
- TXT
-
Show 4 TXT records
ZOOM_verify_R42peGtFwIYfmqrc3HJhnjgoogle-site-verification=HHNX2lhpjBvLQQLhzyz_Kgw-8V7lqu7FL73Q9l3lYloapple-domain-verification=8v249qbIdqyOEWuSdocusign=bcec609b-1409-42ed-8b74-7f7a5b4b90ca
Email authentication partial
- SPF
-
v=spf1 include:dc-34c065e1ae._spfm.geltor.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; pct=100; rua=mailto:re+gyaf7iapa2w@dmarc.postmarkapp.com; sp=none; aspf=r;policy: none (monitoring only) · sp=none - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCK+0EGaEOEMUeJipSo0qk4K+PtgZi4jWoQ8hV3Poqz2tiBHB2BwpCLw2fbDMY1S8PQYebDeI4mD8aVMSUhz…
selectors probed - selector1:
Certificate (current)
E7
Expires in 74 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-content-type-options
nosniff- content-security-policy
connect-src 'self' www.google-analytics.com https://api.lever.co/v0/postings/geltor *.netdna-ssl.com cdn.linkedin.oribi.io forms.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com region1.google-analytics.com https://px.ads.linkedin.com; object-src 'none'; img-src 'self' mgtemplate.wpengine.com p.typekit.net www.googletagmanager.com www.google-analytics.com secure.gravatar.com data: *.gravatar.com *.gravatar.com *.netdna-ssl.com px.ads.linkedin.com px4.ads.linkedin.com forms-na1.hsforms.com api.hubspot.com forms.hsforms.com js.hsforms.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' use.typekit.net ajax.googleapis.com www.googletagmanager.com www.google-analytics.com https://andreasmb.github.io/lever-jobs-embed/index.js *.netdna-ssl.com snap.licdn.com js.hsforms.net; style-src 'unsafe-inline' 'self' https://andreasmb.github.io/lever-jobs-embed/embed-css/style.css *.netdna-ssl.com; font-src 'self' data: *.typekit.net *.netdna-ssl.com; frame-src 'self' *.youtube.com forms.hsform- strict-transport-security
max-age=63072000; includeSubDomains