mortgagequestions.com
HTML metadata
Technology
- CMS
- Ghost
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- cdn.jsdelivr.net×2
- cdnjs.cloudflare.com×2
- www.googletagmanager.com×1
Registration
- Registrar
- Network Solutions, LLC
- Created
- 1998-11-06
- Expires
- 2027-11-05 534 days left
- Updated
- 2025-12-22
- Name servers
-
- ns-1035.awsdns-01.org
- ns-1581.awsdns-05.co.uk
- ns-586.awsdns-09.net
- ns-7.awsdns-00.com
DNS records live
- NS
-
- ns-1035.awsdns-01.org
- ns-1581.awsdns-05.co.uk
- ns-586.awsdns-09.net
- ns-7.awsdns-00.com
- MX
-
- 10 mx1.hc4155-34.iphmx.com
- 10 mx2.hc4155-34.iphmx.com
- TXT
-
Show 4 TXT records
LfbaBdJ3RhShswZtymsdQJAo7HrewN7Lon37b7y/s/BeiJgXF4zFbyiQtCkyeINSyAf6mB8KHp8q+AesMbmPIg==MS=ms19444223MS=ms51353250ny+zEHy1mU0GlIbKIOVQpp5RGJFjx5BEjxazxqsJ2usorIT7MVKYeF0qJA247ln9VPCWD6qb+XuVqp6NMcAbsw==
Email authentication strong
- SPF
-
v=spf1 mx ip4:68.232.131.246 ip4:68.232.143.55 ip4:206.201.66.26 ip4:206.201.66.27 ip4:74.113.193.79 ip4:74.113.193.80 include:spf.phh.com include:spf2.phh.com include:clispf.bkfs.com include:_spf.act-on.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:a97e55a7b857189@dmarcmonitor.net; ruf=mailto:ruf.report@dmarcmonitor.net; fo=1; adkim=r; aspf=r; pct=100; rf=afrf; ri=3600; sp=rejectpolicy: reject (enforced) · sp=reject - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g+ZUxlhXMRa6MFUyl1Vjmylc7LTMjlotLmsOkmH9Qus0HgdFJQmfNettwfZ23UzFt/PkXe+okt4Hv669Z… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWnK7/1Kw8Focd3qOaHUo4guXxNcUcYH+DOe2SrWaZJn7zzkqm5ZQyJVpbyZ38n7qpNxHUcZh0nlIGd8Zq…
selectors probed - s1:
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 13 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src 'self' wss://053y2n40u0.execute-api.us-east-1.amazonaws.com https://j536jn1nn4.execute-api.us-east-1.amazonaws.com/ https://availability.servisbot.com https://api.us1.helium.servismatrix.com https://lightning.us1.helium.servismatrixcdn.com https://www.google-analytics.com https://cdn.jsdelivr.net;font-src 'self' https://use.fontawesome.com https://fonts.googleapis.com https://fonts.gstatic.com https://unpkg.com data:;img-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://www.google.com https://platform-cdn.sharethis.com https://s4desktop.com https://www.google.co.in https://www.google-analytics.com https://s3.amazonaws.com www.googletagmanager.com;frame-ancestors 'self' https://cms-uat.mortgagequestions.com https://uat.mortgagequestions.com https://4654125057.encompasstpoconnect.com;frame-src 'self' https://cms-uat.mortgagequestions.com https://uat.mortgagequestions.com https://bid.g.doubleclick.net https://www.google.com http://dntcl.quala- strict-transport-security
max-age=31536000; includeSubDomains; preload