naiin.com
HTML metadata
Technology
- CDN
- Cloudflare
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (9)
- mstatic.priceza.com×2
- www.googletagmanager.com×2
- apps.apple.com×1
- cdnjs.cloudflare.com×1
- challenges.cloudflare.com×1
- click.accesstrade.in.th×1
- dbdregistered.dbd.go.th×1
- play.google.com×1
- www.facebook.com×1
Social
Contact
- Phone
Registration
- Registrar
- PDR Ltd. d/b/a PublicDomainRegistry.com
- Created
- 1999-12-03
- Expires
- 2027-12-03 561 days left
- Updated
- 2024-02-01
- Name servers
-
- arvind.ns.cloudflare.com
- mia.ns.cloudflare.com
DNS records live
- NS
-
- arvind.ns.cloudflare.com
- mia.ns.cloudflare.com
- MX
-
- 10 mx-sces.emsgateway.net
- Verified for
-
- GlobalSign
Email authentication strong
- SPF
-
v=spf1 ip4:103.212.36.101 ip4:203.146.81.194 ip4:203.146.81.198 include:_net1.todaymail.net include:sendgrid.net include:_spf.google.com -allstrict (-all) - DMARC
-
v=DMARC1; p=none; fo=1; rua=mailto:92a700dc@mxtoolbox.dmarc-report.com; ruf=mailto:92a700dc@forensics.dmarc-report.compolicy: none (monitoring only) - DKIM
-
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - mail:
v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sKhAqBOSJ7BCQD7fiPOL8POe4mG6K4AFOB5iVN/nP4YMKCnq6Ds0iDriO9Ppl48usa9…
selectors probed - k2:
Certificate (current)
WE1
Expires in 19 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(self), microphone=(), camera=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' https://challenges.cloudflare.com 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://connect.facebook.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://mstatic.priceza.com https://click.accesstrade.in.th https://challenges.cloudflare.com https://maps.googleapis.com https://www.priceza.com https://unpkg.com https://kpaymentgateway.kasikornbank.com https://www.paypal.com https://www.paypalobjects.com https://cv.accesstrade.in.th https://www.youtube.com https://s.ytimg.com https://*.ytimg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://kpaymentgateway.kasikornbank.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://kpaymentgateway.kasikornbank.com; img-src 'self'- strict-transport-security
max-age=31536000; includeSubDomains
Links to (7)
- apple.com×2
- facebook.com×2
- google.com×2
- instagram.com×2
- tiktok.com×2
- twitter.com×2
- youtube.com×2