priceforbes.com
HTML metadata
Technology
- CDN
- Azure Front Door
- Analytics
-
- Google Tag Manager
- Fonts
-
- Font Awesome
Third-party hosts loaded (4)
- cdnjs.cloudflare.com×3
- cdn.jsdelivr.net×2
- use.fontawesome.com×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- ns1052.ui-dns.biz
- ns1052.ui-dns.com
- ns1052.ui-dns.de
- ns1052.ui-dns.org
- MX
-
- 10 eu-smtp-inbound-1.mimecast.com
- 10 eu-smtp-inbound-2.mimecast.com
- TXT
-
Show 16 TXT records
47rlj3vmnfs09rv3gvpj0utj1a.knowbe4-site-verification=6f7eb77eda507379a993b2ac0c342f55uk37v12e7k1tgho9h640c3sdnq.ce4632c9bd18406fb94db6174328da344c6ad0cllnk61d67v01jb4133b3o06t90l6ogiunkelj265go5q6k9tcppkruo237t77ma3ielu5j7.apple-domain-verification=0BFkmq5m8f1s3T1y5qa101b52lj06o8j91k1rig8sm.69dilpliukap4q63ar5c8eteqadetectify-verification=6841e2a7e7576da7627e1d897dbeb010Fr+DGelC3bjxcR5J8SdUSrEK6bL8uGAxslV1MLkCU1jvnNoqYd7NJyyr4AgUwqTrYVkSHzS/K0s7IbtLvZA1Ig==5j2v08n6jfc0huj1nll9ukuskvanthropic-domain-verification-mpg2mq=qsYKnTYRXlwdolquype7yOOJalogmein-verification-code=1dac6699-5c78-4542-b1c4-0d88dae753c2v5nct9jo8019orn5qlmj9642up
Email authentication strong
- SPF
-
v=spf1 include:b2smvxq8gx.powerspf.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:th11zqfj45@rua.powerdmarc.com; ruf=mailto:th11zqfj45@ruf.powerdmarc.com; fo=1;policy: reject (enforced) - DKIM
-
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5CX4Vrm/qqDo7Hkcag4cEx0JETU9cTLjvdO8RaotpNEh9GMbXg8Blc//h8o5hYCeTQJPI6jEUhsxWeLxV… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeT6WzyJlS8VFcJ6CtIvSn8bWURCZsUhyfgKtA3FlcMRA3t7tU1bAnqNFYNwOwUYt0gBm6IkVDvYcTgnhj…
selectors probed - k2:
Certificate (current)
GeoTrust TLS RSA CA G1
Expires in 98 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
DENY- permissions-policy
geolocation=(), microphone=(), camera=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://js.monitor.azure.com https://snap.licdn.com https://cdn.cookie-script.com https://www.google.com https://www.gstatic.com https://js-eu1.hs-scripts.com https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.hscollectedforms.net https://js-eu1.hsadspixel.net https://googleads.g.doubleclick.net https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com; img-src 'self' data: https:; connect-src 'self' https: ws: wss: http://localhost:* https://*.in.applicationinsights.azure.com; frame-src https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://marketplace.umbraco.com https://www.youtube.com https://www.youtube-nocookie.c- strict-transport-security
max-age=31536000; includeSubDomains; preload