qa.com
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- fonts.googleapis.com×2
- fonts.gstatic.com×1
- t.wowanalytics.co.uk×1
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- International House, 1 St Katharine’s Way, London, E1W 1UN
Registration
- Registrar
- IONOS SE
- Created
- 1994-10-25
- Expires
- 2026-10-24 156 days left
- Updated
- 2025-10-25
- Name servers
-
- ns0.ukfast.net
- ns1.ukfast.net
DNS records live
- NS
-
- ns0.ukfast.net
- ns1.ukfast.net
- MX
-
- 10 qa-com.mx1.mailanyone.net
- 10 qa-com.mx2.mx25.net
- 10 qa-com.mx3.mailanyone.net
- 10 qa-com.mx4.mx25.net
- TXT
-
Show 4 TXT records
284076e0-92cf-456e-9c1a-d2960b6cb2bcamazonses:CNLf39oZWgFS2aL1B163CCHDmM/qJ7UxrZM2jv6LbOw=unbounce690555it8vuCzCA2wObWfNwEpGribIp26F9PZ+rLcTzh6yERkVoGD382FRB+L6eaPweLmPe8rPVQtQ/P4gICANjjXfnA==
- Verified for
-
- Apple
- Atlassian
- Cisco
- Cisco Webex
- Microsoft 365
- Miro
- OneTrust
- Pendo
Email authentication strong
- SPF
-
v=spf1 mx ip4:194.168.57.254 ip4:208.185.229.0/24 ip4:208.185.235.0/24 ip4:148.59.101.16/28 ip4:18.168.51.200 ip4:18.168.140.58 ip4:192.162.217.4 ip4:192.162.216.4 ip4:209.202.128.38 ip4:204.15.171.6 ip4:72.85.155.85 ip4:198.37.153.11 a:mail.enterprisestudy.com a:mailrelay.kallidus-suite.com include:spf.mailanyone.net include:spf.mailjet.com include:_spf.salesforce.com -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarcadmin@qa.compolicy: quarantine - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dtpJ+bf3Q3gHOwyz/EplvGZUZl8tTWILS82rkIyF0u1iFX3DXy+wZJ0tBWj8wHwdS6vOY3uZarT/yG0Hu… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSO81wlDaXzX5oEu2nNOjLp8HqckbPfyywSO1gguMe5r1GPB88am+rZWRHjXXEFFAdIMdhKMtwrou+9oM5xwnk3A…
selectors probed - s1:
Certificate (current)
Sectigo Public Server Authentication CA OV R36
Expires in 100 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.drda.io cdn.dreamdata.cloud qaltd.qualtrics.com copilotstudio.microsoft.com api.substack.com substackcdn.com *.qa-dev.com *.byspotify.com *.spotify.com *.clarity.ms *.run.app ws.zoominfo.com api.country.is js.zi-scripts.com *.outgrow.co *.clickcease.com *.umbraco.com *.hockeystack.com *.youtube-nocookie.com qaltd.outgrow.us dyv6f9ner1ir9.cloudfront.net *.6sc.co *.6sense.com *.quantcount.com *.quantserve.com google.com www.google.com *.oribi.io pixel.mathtag.com secure.adnxs.com *.techtarget.com s.ml-attr.com attr.ml-api.io analytics.tiktok.com js.usemessages.com qaapprenticeships.com cgtforms.com fonts.gstatic.com fonts.googleapis.com s3-eu-west-1.amazonaws.com *.leadforensics.com webeo-web-content.s3-eu-west-1.amazonaws.com cdn.jsdelivr.net ldynamicspublicapi.leadforensics.com *.postcodeanywhere.co.uk secure.cold5road.com *.vzaar.com *.hsleadflows.net *.brightedge.com *.b0e8.com *.b038.com *.bc0a.com *.feefo.com *.soundcloud.com *- strict-transport-security
max-age=63072000; includeSubDomains; preload