hcz.org
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
- Social widgets
-
- Vimeo Embed
Third-party hosts loaded (6)
- ajax.googleapis.com×2
- fonts.googleapis.com×2
- player.vimeo.com×2
- www.facebook.com×2
- www.googletagmanager.com×2
- gmpg.org×1
Social
Contact
- Phone
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2000-10-29
- Expires
- 2026-10-29 163 days left
- Updated
- 2025-12-13
- Name servers
-
- pdns08.domaincontrol.com
- pdns07.domaincontrol.com
DNS records live
- NS
-
- pdns07.domaincontrol.com
- pdns08.domaincontrol.com
- MX
-
- 10 us-smtp-inbound-1.mimecast.com
- 10 us-smtp-inbound-2.mimecast.com
- TXT
-
Show 16 TXT records
slack-domain-verification=7tW2kKm5Y7s7bmv0RdwbqaXFhRfEPBQIBTPcyxMUapple-domain-verification=0y0J5fl66x5D2Rautaegis-domain-verification=c2a870fd334e0e879cdbeeec3a329c885ba971dc7e52c7295d6fc20e1d851f4as9t03g2qusuj3gcguecd9nfqjsautodesk-domain-verification=89TCiG9w04Wv2JibXq9Kjamf-site-verification=Dzf-3orlTqG3kPsfmYb20Ateamviewer-sso-verification=be7e1ab4ae86464aa0abaefdd520b340MS=ms86938848adobe-idp-site-verification=e5601881e75147b5636f19883510aa5aae7114bb156de6506a0d5e3a792ba55ccalendly-site-verification=zkRmmZkPbtE3jxlwftZemmGkptajE742d5awOkYISsophos-domain-verification=ac874ac416d9dd1425f06e13eb80ac93508bdb7c0e8e3e56d9ed10816ae715cbdocusign=eeec585f-762b-4810-972e-1ea52d3ca05dhppgo930l6mahvhvrlnak0r1cl6mKXY39dm2/1lA99bnQHgLXTRO71Ifcpxsdy+Rbk5ZOB4t6HOOINM8iCHRQnD5bBwfHtaL5EoOxeKtTnwBAiVw==ZOOM_verify_pOk1lhZ94bNFkkrV4SVui3canva-site-verification=NJSd6qORUzxMijggicZvAg
Email authentication strong
- SPF
-
v=spf1 redirect=63ykusnq._spf._d.mim.ecno all qualifier - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:09010ba431b6534@rep.dmarcanalyzer.com; ruf=mailto:09010ba431b6534@for.dmarcanalyzer.com; fo=1;policy: quarantine - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszK+CTrtp+WmnUCWK8sCQHc9qzpuBnQFTMhFuR1P+90GaRcbeeiybfMVKoVYroSjf6LWF0lmNkY1VJ… - selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCN1Jpi0b1oFOYzVwekmOTMJURlpBGjwNu+6lDYHSrcjQ24J0sjEIkeiAZtI1SXCNynwCkfQZ2GqWuNCzZHS7… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - google:
Certificate (current)
R12
Expires in 41 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(), microphone=()- x-content-type-options
nosniff- content-security-policy
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;, upgrade-insecure-requests- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (6)
Linked from (1)
- civic.co×1