keynua.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- AmazonS3
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- www.googletagmanager.com×4
- fonts.googleapis.com×1
- js.hs-scripts.com×1
- www.google.com×1
Social
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2014-02-07
- Expires
- 2028-02-07 627 days left
- Updated
- 2025-02-04
- Name servers
-
- ns-1267.awsdns-30.org
- ns-1895.awsdns-44.co.uk
- ns-398.awsdns-49.com
- ns-783.awsdns-33.net
DNS records live
- NS
-
- ns-1267.awsdns-30.org
- ns-1895.awsdns-44.co.uk
- ns-398.awsdns-49.com
- ns-783.awsdns-33.net
- MX
-
- 10 aspmx.l.google.com
- 20 alt1.aspmx.l.google.com
- 20 alt2.aspmx.l.google.com
- 30 aspmx2.googlemail.com
- 30 aspmx3.googlemail.com
- TXT
-
3dm43kr2jfnqydpz6tj7j4j2hps2x8h1amazonses:0RDfDQLvetCWMXIn/83dYMMrld9uHH59xJnryB90ri0=
- Verified for
-
- Meta
Email authentication strong
- SPF
-
v=spf1 mx include:_spf.google.com include:spf.mandrillapp.com include:spf.intiza.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:2w96qc9r2n@rua.powerdmarc.com; ruf=mailto:2w96qc9r2n@ruf.powerdmarc.com; pct=100; fo=1;policy: reject (enforced) - DKIM
-
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - k2:
Certificate (current)
Amazon RSA 2048 M03
Expires in 63 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.keynua.com;script-src 'self' 'nonce-v91r7ti89ig' 'strict-dynamic' 'unsafe-inline' *.google.com www.google-analytics.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hsadspixel.net *.hubapi.co *.clientify.net *.cloudflare.com *.facebook.net *.facebook.com *.bootstrapcdn.com *.linkedin.com *.hubspot.com *.stripe.com *.hcaptcha.com hcaptcha.com *.stripecdn.com stripecdn.com googleads.g.doubleclick.net stats.g.doubleclick.net td.doubleclick.net *.keynua.com sentry.io *.hubapi.com *.s3.amazonaws.com;style-src 'self' 'unsafe-inline' *.google.com www.google-analytics.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hsadspixel.net *.hubapi.co *.clientify.net *.cloudflare.com *.facebook.net *.facebook.com *.bootstrapcdn.com *.linkedin.com *.hubspot.com *.stripe.com *.hcaptcha.com hcaptcha.com *.stripecdn.com stripecdn.com googleads.g.doubleclick.net- strict-transport-security
max-age=15768000;includeSubdomains