mynx.co
HTML metadata
Technology
- CDN
- Amazon CloudFront
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
- Segment
- Ads
-
- Google Ads (DoubleClick)
Third-party hosts loaded (6)
- www.googletagmanager.com×2
- accounts.google.com×1
- cdn.segment.com×1
- o176395.ingest.sentry.io×1
- stats.g.doubleclick.net×1
- www.google.com×1
DNS records live
- NS
-
- ns-1455.awsdns-53.org
- ns-1803.awsdns-33.co.uk
- ns-339.awsdns-42.com
- ns-562.awsdns-06.net
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 include:amazonses.com include:_spf.google.com include:helpscoutemail.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=none;pct=100;rua=mailto:dmarc@mynx.co;ruf=mailto:dmarc@mynx.co;ri=86400;fo=1;policy: none (monitoring only) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Xx3hJQUQeHQTvVXqlkClZkAwzyel1zaUV6PUHB0c6uH57vKVH5RfEq0CkU9WziqrXBxnfHWXRV7E… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAror6hUOel9jQNsgc0CWvsIWbbWR5YhUevXqOlM42jNQZh+MGKjQex5Y8IpfrhiyY1VuBVnK93qFpB4ngse… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/mBfne+pvNa4+ByWhPptZfidbXQwE7boBNz28RqZV4Im5K5WJ89Jxa0yqa5eB0a2hO1gGsKEdLPjimQvX…
selectors probed - google:
Certificate (current)
Amazon RSA 2048 M01
Expires in 148 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src https://*.mynx.co https://mynx.co; connect-src https://*.mynx.co https://mynx.co data: blob: wss://*.mynx.co wss://mynx.co https://*.twilio.com https://vc.hotjar.io https://*.amazonaws.com https://in.hotjar.com wss://global.vss.twilio.com wss://sdkgw.us1.twilio.com wss://chunderw-vpc-gll.twilio.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://*.sentry.io https://accounts.google.com https://6b9ee2806d56.us-west-2.sdk.awswaf.com https://*.us-west-2.token.awswaf.com https://*.clarity.ms https://secure.safewebservices.com https://eventgw.twilio.com wss://voice-js.roaming.twilio.com https://media.twiliocdn.com https://sdk.twilio.com *.visualwebsiteoptimizer.com app.vwo.com https://*.typesense.net https://*.skype.com https://*.microsoft.com wss://*.microsoft.com https://api.segment.io http://cdn.segment.com https://api.fpjs.io https://www.gstatic.com https://js-agent.newrelic.com https://bam.- strict-transport-security
max-age=31536000; includeSubDomains; preload