profantasyrodeo.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
- Ads
-
- Google Ads (DoubleClick)
- Meta Pixel
- Fonts
-
- Google Fonts
Third-party hosts loaded (11)
- cdn.jsdelivr.net×3
- code.jquery.com×2
- fonts.googleapis.com×2
- securepubads.g.doubleclick.net×2
- stackpath.bootstrapcdn.com×2
- www.googletagmanager.com×2
- cdn.jwplayer.com×1
- connect.facebook.net×1
- fonts.gstatic.com×1
- static.chartbeat.com×1
- www.facebook.com×1
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2003-10-02
- Expires
- 2026-10-02 134 days left
- Updated
- 2025-10-03
- Name servers
-
- damien.ns.cloudflare.com
- lana.ns.cloudflare.com
DNS records live
- NS
-
- damien.ns.cloudflare.com
- lana.ns.cloudflare.com
- MX
-
- 10 us-smtp-inbound-1.mimecast.com
- 10 us-smtp-inbound-2.mimecast.com
- TXT
-
0ed1fe018a8e5ebc06cbb3479c9cdb76bcfe066a99knowbe4-site-verification=46d0e1760ff59b0035be44e5fb4ac0ab
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 a mx include:spf.protection.outlook.com include:mail.zendesk.com include:_spf.google.com include:icpbounce.com include:us._netblocks.mimecast.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.emailpolicy: none (monitoring only) - DKIM
-
Show 4 DKIM selectors
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZM+YlBHalz10P605bg5Dk7n8wAeS6mrnPcnd6PSgHxoNSa8hBYoZzxU4vBvS9yr4A4xyDJP5mD4Lx… - selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uRHnjW0yL8NZxTibxC9t+CbWKGhKGP+CSxwHScscAJVDft3UgCF1n/7tzQO2JBoGUWxnQpU9onOgZ… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxELJQaC3wkAvaJEqBakHgxPRXv6Qe4SOwulFpnKVJ445rWh9Z+mhf+yE8TbMuncakfoYmM4RhE+R3q/2Kl… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdSJQ4sJeghmzy7TD3h4qjnXC3ZDmkv/Z/trpFI6x3ppVS2WAGU2rict1xIgebVybqm5KiWblcrPLN38YQ…
selectors probed - google:
Certificate (current)
Amazon RSA 2048 M01
Expires in 160 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- cross-origin-opener-policy
- cross-origin-embedder-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' https:;script-src 'self' https: 'unsafe-inline' 'unsafe-eval';script-src-attr 'unsafe-inline';worker-src 'self' blob: https:;child-src 'self' blob: https:;style-src 'self' https: 'unsafe-inline';img-src 'self' data: https: http:;font-src 'self' data: https:;connect-src 'self' https: wss: ws:;frame-src 'self' https:;object-src 'none';upgrade-insecure-requests;base-uri 'self';form-action 'self';frame-ancestors 'self'- strict-transport-security
max-age=15552000; includeSubDomains- cross-origin-opener-policy
unsafe-none- cross-origin-embedder-policy
unsafe-none- cross-origin-resource-policy
cross-origin