passion.io
HTML metadata
Technology
- CDN
- Cloudflare
- Server
- nginx
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (13)
- cdn.prod.website-files.com×133
- fast.wistia.com×3
- hubspotonwebflow.com×2
- ajax.googleapis.com×1
- app.optibase.io×1
- cdnjs.cloudflare.com×1
- d3e54v103j8qbb.cloudfront.net×1
- fonts.googleapis.com×1
- fonts.gstatic.com×1
- hubspotv2.use1-marketplace-1p-apps-prod-red.if.webflow.services×1
- js.hs-scripts.com×1
- widget.trustpilot.com×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- ns1.dnsimple-edge.com
- ns2.dnsimple-edge.net
- ns3.dnsimple-edge.io
- ns4.dnsimple-edge.org
- MX
-
Show 6 MX records
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 10 inbound-smtp.us-east-1.amazonaws.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 12 TXT records
ZOOM_verify_P9aJASPu8iSAGkINLmC3QHairtable-verification=adddbffaac56b5d1372fc87300d12e53amazonses:sLkPh9TcGYREkyk1kHVz5Hebnlt6KsGbhwDKCSGyKpQ=facebook-domain-verification=j0l0y5xbtfoe8t546oiqqk5mdmr1ligoogle-site-verification=4lCRxpaYvJMwhB4YdfsWeLwEXd3rouDKQKj0Y-IyT2Egoogle-site-verification=FO0y8cQBKS_3dnSdi6DhrfwM5NMBYaw_8fXJMurkASEgoogle-site-verification=mJx3hu6ran8BbEBhjrcAcTaiZzg--2HkXSxD088LiMkgoogle-site-verification=rG3aaqdQf5jUsgBPTZTzLoiVOBjCR1HqV4gdnZ2t_awgoogle-site-verification=xR4JRsh1cXoQ4P2PA70iD0Fp1-s2L27rMW083UFfs28google-site-verification=xmY6TDLsSvr1DO8CGaSrXxBMoLK5iyNi0dUBk6eiMYgstripe-verification=c3904ad8649034a73aadbd031a73457e7bc45e09d465a64cd22331dc04275969ALIAS for production-passion-elb-1002390718.us-east-1.elb.amazonaws.com
Email authentication strong
- SPF
-
v=spf1 a mx include:_spf.google.com include:spf.mandrillapp.com include:spf.braintreegateway.com include:spf.tipalti.com include:_spf.elasticemail.com include:spf.mailjet.com include:mail.zendesk.com include:24480413.spf10.hubspotemail.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; pct=90; sp=nonepolicy: quarantine · pct=90 · sp=none - DKIM
- no key found at common selectors
Certificate (current)
Amazon RSA 2048 M04
Expires in 145 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- findings
-
- missing HSTS
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- content-security-policy
frame-ancestors 'self'
Links to (9)
- facebook.com×3
- instagram.com×3
- linkedin.com×3
- pssn.io×3
- spotify.com×3
- trustpilot.com×3
- twitter.com×3
- workable.com×3
- youtube.com×3