hazeldenbettyford.org
HTML metadata
Technology
- Server
- Apache
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (4)
- s7d9.scene7.com×41
- assets.adobedtm.com×1
- static.legitscript.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2013-09-24
- Expires
- 2026-09-24 125 days left
- Updated
- 2024-07-05
- Name servers
-
- authns1.mpls.qwest.net
- authns2.dnvr.qwest.net
- authns3.sttl.qwest.net
DNS records live
- NS
-
- authns1.qwest.net
- authns2.qwest.net
- MX
-
- 10 hazeldenbettyford-org.mail.protection.outlook.com
- TXT
-
Show 7 TXT records
MS=8DA945F95C7D6A616538DC4049BA150E7194FE4Eecostruxure-it-verification=f76e8840-fd4e-4bde-90d1-ee71c7a02080IdveFQqXtLhU7wAUB3T6UcokF7vi0fzxDbQmllD/ZSsB1luuMb/rTvKbxyfNiU45pRTjMcMyG+FFZpMnSNIoNg==pardot_220262_*=bfe39d2ba45e393328d1461f1be62aa7c06c71248892d48efa67e39ca73f0c38Validity-Domain-Verification=M7kFhXLn7XqF+K9N+JPfu+AH6YU=u72j1oojrq5e1ujbtc2a03v0c0hhUeXJ3v8gsLGBUMPRxWQc0jEqJjSX4FvOmVwYWzlsYyy8dksBwIdafHQGoMPjiEeTkw3xRvqFk3+BxE7xsObg==
- Verified for
-
- Adobe
- Apple
- Cisco
- DocuSign
Email authentication strong
- SPF
-
v=spf1 include:spf.protection.outlook.com include:_spf.salesforce.com include:_spf.psm.knowbe4.com ip4:4.4.81.112/29 ip4:24.220.65.0/29 -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:dmarc_agg@dmarc.everest.email; ruf=mailto:dmarc_fr@dmarc.everest.email; fo=1; pct=100; rf=afrfpolicy: quarantine · sp=quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDD9iLn4isLTVmTqHlytJ8lyQfcBHroDlf25r7sppvyzuGsn9QL/h6xVh+kMpQvCCx/4W9VCRuH0sf7dQ5/vp…
selectors probed - selector1:
Certificate (current)
Go Daddy Secure Certificate Authority - G2
Expires in 126 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self'; object-src self; img-src 'self' https://3067.global.siteimproveanalytics.io https://alb.reddit.com https://bat.bing.com https://embed-ssl.wistia.com https://fast.wistia.com https://www.googletagmanager.com https://images.talkfurther.com https://s7d9.scene7.com https://static.legitscript.com https://widgets.guidestar.org https://www.google.com ; form-action 'self' https://e2.hazeldenbettyford.org https://hbffgenesisdev.b2clogin.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.adobedtm.com https://bat.bing.com https://browser.se- strict-transport-security
max-age=63072000; includeSubdomains;