orfium.com
HTML metadata
Technology
- Server
- Apache
- CMS
- Wix
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (5)
- www.googletagmanager.com×2
- cdn-cookieyes.com×1
- fonts.googleapis.com×1
- js.hs-scripts.com×1
- js.hsforms.net×1
Social
Registration
- Registrar
- Moniker Online Services LLC
- Created
- 2014-08-06
- Expires
- 2034-08-06 3000 days left
- Updated
- 2025-11-25
- Name servers
-
- ns-1177.awsdns-19.org
- ns-1574.awsdns-04.co.uk
- ns-393.awsdns-49.com
- ns-867.awsdns-44.net
DNS records live
- NS
-
- ns-1177.awsdns-19.org
- ns-1574.awsdns-04.co.uk
- ns-393.awsdns-49.com
- ns-867.awsdns-44.net
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 13 TXT records
apple-domain-verification=iUmddlYiUF7frvlHatlassian-domain-verification=tEEd1NyEleaPsBaaCDMcpR5uec8KmB3RrBP836IaLHPgzEnt/BxoSNsvbR4IcuCpcarta-domain-verification-shrykt=JqYVfKUP6LF8s4bhGeYLkMTvBcursor-domain-verification-gvbz2d=tJRfPIvQb7Zsm9oN0Hwplk9RKgoogle-site-verification=MjYfdcgyeSXYjGSbPQxWeEGRmw9A_HM6BbU-aEzOE4ogoogle-site-verification=iGG9qNSBrFV2x57MZ9kww8L5UK6IemhgkC0Jbx8TW1cgoogle-site-verification=maxPaZtV9FDWnp_FYyGaHiWQKfCShciy9hFwonOV5QEgoogle-site-verification=sJI1M3fZyUmXUlcpguLWAjW6yL6VhROq8j0g48VzcQQhubspot-domain-verification=Y2E3ZDUzMTYtMjJkZi00MThmLWFlZDctMzcxNTJjYTQ0Y2Mwintacct-esk=DA470E697DD9BDA7E05396220D0A4316postman-domain-verification=9099797a4e1ee30d4f376268d6f5a46aca9ed60175bc2918149d58c8980d64d095a0efcdc59a41c011693c8bbcc1d646d4661f128f8d9c46d70051e96c5ea9dc7BA27664CFMS=ms36371935
Email authentication partial
- SPF
-
v=spf1 mx include:spf.ymlp.com include:amazonses.com include:_spf.google.com include:4274017.spf02.hubspotemail.net include:_spf.intacct.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc-reports@orfium.compolicy: none (monitoring only) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxOYMmKmwXVvegImwdeYKi6mYz4XYZWZ02AI0yaVoTFJmPfXDr/WcBB4Cl+EbJvO7uEN/xtPninNkH…
selectors probed - google:
Certificate (current)
E7
Expires in 74 days
HTTP security headers
- present
-
- content-security-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
child-src 'self' https:; connect-src 'self' https:; default-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://*.hs-sites.com https://www.google.com https://recaptcha.google.com; img-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'self' 'unsafe-inline' https:; worker-src 'self' https: blob: