pafin.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- CMS
- Next.js
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- pafin-cortex-production.s3.ap-northeast-1.amazonaws.com×24
- fonts.googleapis.com×4
- fonts.gstatic.com×1
- www.google.com×1
Contact
- Address
- 麹町3丁目2番4号 フロンティア麹町5階, 102-0083, 東京都千代田区, JP
Registration
- Registrar
- Amazon Registrar, Inc.
- Created
- 2004-07-12
- Expires
- 2026-07-12 54 days left
- Updated
- 2025-06-07
- Name servers
-
- ns-1466.awsdns-55.org
- ns-1576.awsdns-05.co.uk
- ns-454.awsdns-56.com
- ns-719.awsdns-25.net
DNS records live
- NS
-
- ns-1466.awsdns-55.org
- ns-1576.awsdns-05.co.uk
- ns-454.awsdns-56.com
- ns-719.awsdns-25.net
- MX
-
- 0 pafin-com.mail.protection.outlook.com
- TXT
-
Show 4 TXT records
google-site-verification=DzCeQO7ZzhtOySN-TJ_YiUrJlhkSsm8Kb8hqfdWbSqUperplexity-ai-domain-verification-1rag2y=xXNeSe9uTvMq45viRwNhfESCBv=spf1 include:amazonses.com include:spf.protection.outlook.com include:_spf.mlsend.com include:_spf.mailersend.net include:_spf.prtimes.jp include:_bcspf4n.guardianwall.jp include:mail.zendesk.com -allasv=2a9f4ce96e2258d7b8678884da4c7425
Certificate (current)
Amazon RSA 2048 M04
Expires in 120 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests ; default-src 'self'; base-uri 'self'; object-src 'self'; frame-ancestors 'self'; script-src 'self' www.google.com *.googletagmanager.com www.gstatic.com 'sha256-Jfk0a/m9dHkw2ZKux8QcA1mq4zt+BOJ/k9nTUV6CXMs='; script-src-elem 'self' www.google.com *.googletagmanager.com www.gstatic.com connect.facebook.net 'sha256-Jfk0a/m9dHkw2ZKux8QcA1mq4zt+BOJ/k9nTUV6CXMs=' app.enzuzo.com 'sha256-Vf8Tj36mXiHKuxNYAGodQS/N2159HJpzBhi/NddtKRs=' 'sha256-Tb+ZvG5OK70MycZcVPbLAlNRuAPyvn6qR8/OyR6qy1Q='; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' blob: data: https:; frame-src 'self' www.google.com www.youtube.com; connect-src 'self' *.google-analytics.com *.googletagmanager.com https://www.google.com *.sentry.io app.enzuzo.com; form-action 'self'; font-src 'self' fonts.gstatic.com data:; manifest-src 'self'; media-src 'self'- strict-transport-security
max-age=63072000