goldbondbuilding.com
HTML metadata
Technology
- Server
- nginx
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (7)
- d3q01gc7kwv7n6.cloudfront.net×26
- www.googletagmanager.com×2
- cdn-cookieyes.com×1
- challenges.cloudflare.com×1
- js.hs-scripts.com×1
- unpkg.com×1
- use.typekit.net×1
Social
Contact
- Address
- 2001 Rexford Road, 28211, Charlotte, North Carolina, US
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2020-06-19
- Expires
- 2026-06-19 31 days left
- Updated
- 2025-06-03
- Name servers
-
- pdns92.ultradns.biz
- pdns92.ultradns.com
- pdns92.ultradns.net
- pdns92.ultradns.org
DNS records live
- NS
-
- pdns92.ultradns.biz
- pdns92.ultradns.com
- pdns92.ultradns.net
- pdns92.ultradns.org
- MX
-
- 10 goldbondbuilding-com.mail.protection.outlook.com
- 20 goldbondbuilding-com.mail.protection.outlook.com
- TXT
-
knowbe4-site-verification=375168da45a5e8c4bae5d506a2906b31google-site-verification=XNLkX9xV-9q_AP50oskjnL3vjgUnD3gMegWGxYbkGacMS=ms13365375
Email authentication strong
- SPF
-
v=spf1 mx include:spf.protection.outlook.com -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.emailpolicy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I6li20NYlQZuVmS43jW+v18VthLqHHtjYv9RqlOU44mreaXKoyc0cWOfRyoboHF61FLm2mJ2UEHUE…
selectors probed - selector1:
Certificate (current)
Amazon RSA 2048 M02
Expires in 103 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade, no-referrer-when-downgrade- x-content-type-options
nosniff- content-security-policy
default-src https: *.nationalgypsum.com *.goldbondbuilding.com *.proformfinishing.com *.permabase.com *.askforpurple.com *.bugsnag.com *.googletagmanager.com *.ipredictive.com *.google.com data: 'unsafe-inline' 'unsafe-eval'; frame-src *.nationalgypsum.com *.goldbondbuilding.com *.proformfinishing.com *.permabase.com *.askforpurple.com *.youtube.com forms.hsforms.com *.facebook.com *.doubleclick.net *.adsrvr.org *.googletagmanager.com *.ipredictive.com *.google.com- strict-transport-security
max-age=15768000; includeSubDomains; preload