lazareknbs.com
HTML metadata
Technology
- Server
- nginx
- CMS
- Drupal
DNS records live
- NS
-
- ns1.loopia.se
- ns2.loopia.se
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificates
Loading certificate
HTTP security headers
- present
-
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- findings
-
- missing HSTS
- missing Content Security Policy
- weak frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
ALLOW-FROM https://foranewworld.b-cdn.net/- x-content-type-options
nosniff- content-security-policy-report-only
default-src 'self' 'unsafe-inline' https://fanw-1762d.kxcdn.com fanw-1762d.kxcdn.com https://w.soundcloud.com w.soundcloud.com https://www.google-analytics.com google-analytics.com foranewworld.b-cdn.net https://foranewworld.b-cdn.net https://stage.foranewworld.org https://www.foranewworld.org https://foranewworld.org; frame-src 'self' https://player.vimeo.com foranewworld.b-cdn.net https://foranewworld.b-cdn.net https://www.google.com https://www.foranewworld.org https://foranewworld.org https://stage.foranewworld.org; script-src 'self' 'unsafe-inline' *.google-analytics.com *.fanw-1762d.kxcdn.com *.googletagmanager.com *.sndcdn.com fanw-1762d.kxcdn.com https://fanw-1762d.kxcdn.com foranewworld.b-cdn.net https://foranewworld.b-cdn.net https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://stage.foranewworld.org cdn.jsdelivr.net https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://moderate.cleantalk.org https://polyfill