pangenome.org
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- CloudFront
- Analytics
-
- Plausible
- Social widgets
-
- Vimeo Embed
Third-party hosts loaded (3)
- maxcdn.bootstrapcdn.com×1
- plausible.io×1
- player.vimeo.com×1
Social
DNS records live
- NS
-
- ns-1069.awsdns-05.org
- ns-1744.awsdns-26.co.uk
- ns-206.awsdns-25.com
- ns-516.awsdns-00.net
- Verified for
-
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Amazon RSA 2048 M02
Expires in 108 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.pangenome.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.pangenome.org plausible.io maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com; font-src 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com;img-src 'self' data:; connect-src *; frame-src 'self' player.vimeo.com- strict-transport-security
max-age=15768000; includeSubDomains; preload
Links to (5)
- unibas.ch×1
- nature.com×1
- mpg.de×1
- github.com×1
- doi.org×1