giftseize.io
HTML metadata
Technology
- CDN
- Cloudflare
- Analytics
-
- Google Tag Manager
- Ads
-
- Google AdSense
Third-party hosts loaded (2)
- pagead2.googlesyndication.com×1
- www.googletagmanager.com×1
DNS records live
- NS
-
- ns10.digicertdns.com
- ns11.digicertdns.com
- ns12.digicertdns.com
- ns13.digicertdns.net
- ns14.digicertdns.net
- ns15.digicertdns.net
- MX
-
- 10 mx1.emailsrvr.com
- 20 mx2.emailsrvr.com
Email authentication weak
- SPF
-
v=spf1 a mx include:emailsrvr.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
WE1
Expires in 54 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(self "https://www.giftseize.io")- x-content-type-options
nosniff- content-security-policy
default-src *;style-src * 'unsafe-inline';script-src * 'unsafe-inline' 'unsafe-eval';font-src *;img-src * data:;frame-src *;connect-src *;- strict-transport-security
max-age=31536000; includeSubDomains