pilotcat.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Analytics
-
- Cloudflare Insights
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (6)
- fonts.googleapis.com×2
- www.googletagmanager.com×2
- px.ads.linkedin.com×1
- static.cloudflareinsights.com×1
- www.facebook.com×1
- www.google.com×1
Social
Contact
- Phone
- Address
- st RoadMobile, AL 36695
Registration
- Registrar
- Network Solutions, LLC
- Created
- 1996-05-30
- Expires
- 2030-05-29 1469 days left
- Updated
- 2025-03-30
- Name servers
-
- aliza.ns.cloudflare.com
- leo.ns.cloudflare.com
DNS records live
- NS
-
- aliza.ns.cloudflare.com
- leo.ns.cloudflare.com
- MX
-
- 0 pilotcat-com.mail.protection.outlook.com
- TXT
-
Show 8 TXT records
apkifGu4yyVSvNdcJPAX96RyGJD2b0q3n1CS8Otr0oz9L46apxLSYsWrwrZux31t0RDmhfj7MyhnCY2OUSBNxQ==ca3-dc223e00da9d4d6c9a3167e8eea549adMBjTBWFLW00q3lU7vBKAsdxBDPHp7MDx7VxxdM95Kd4Iy4j5p/ewCi3HqO2sHbX8RofRduxvc4kmN855mxt/5A==dbb0nfd3r9jq3r61l6fv8bmp14p507j1b1z3hl9yt7t91xxpbxgkxz23264gn251teamviewer-sso-venfication=f0c97f7a42b24c783dfb30dd5í714006_lf9x63svwpbbn1tuoriz3xsyyyp54kv_44727yslaomw3sor76winb93f05uydn
- Verified for
-
- Apple
- Atlassian
- Google Workspace
- Microsoft 365
- Smartsheet
- TeamViewer
- Zoom
Email authentication strong
- SPF
-
v=spf1 ip4:198.37.94.0/23 ip4:152.160.0.0/16 include:amazonses.com include:spf.protection.outlook.com include:zcsend.net include:_netblocks.icims.com exists:%{i}._spf.sparkpostmail.com include:sendgrid.net include:spf.zoho.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:0d5ff39a8ab7425bb56d025f65a09440@dmarc-reports.cloudflare.net; ruf=mailto:ruf@pilotcat.com;policy: quarantine - DKIM
-
Show 4 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5louy/r4r63bpWu0XuzLy9nDATbA+VRGGdHf9kYPocBA+Dlf57kZsbtFsLdhE/X4XFecwm5GhzOBGTuEg7B… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNnlSRxxmtK4HkgBig4ek97NYk3vRSOEO39wKspKG9kgtZmON3+NgroatUZCTQLFFD1p3iiamvFXauD82Ho0… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DDGWg0YvPbfCX9PnDUSSgV6YFej/QM8DQgxOOg71HLfLSC8ALF5UBmB1OZtftfRwmaHHh4jb/kuANLPq9… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFon249hLtw4cCA4vC1XvcTETuY/a2/PJaVXf890fQ/FWjvyCr1s6W+83Mi0v13lvJJw1iIl1ULh3eDrz5…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 31 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self'; block-all-mixed-content;script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://content.linkedin.com https://graph.facebook.com https://google-analytics.com https://googletagmanager.com https://js.facebook.com https://platform.linkedin.com https://ssl.google-analytics.com https://snap.licdn.com https://static-exp1.licdn.com https://tagmanager.google.com https://vcc-na28.8x8.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://maps.google.com https://maps.googleapis.com http://maps.googleapis.com salesiq.zohopublic.com; style-src 'self' 'report-sample' 'unsafe-inline' *.licdn.com fonts.googleapis.com tagmanager.google.com www.googletagmanager.com; object-src 'none'; child-src 'self' *.facebook.com connect.facebook.net embed.windy.com *.google.com *.8x8.com; base-uri 'self'; form-action 'self' *.facebook.com connect.facebook.net;worker-src 'self'; d- strict-transport-security
max-age=31536000- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
same-site
Links to (4)
- facebook.com×1
- icims.com×1
- linkedin.com×1
- twitter.com×1