rentpayment.com
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 1999-03-09
- Expires
- 2027-03-09 293 days left
- Updated
- 2024-05-12
- Name servers
-
- chad.ns.cloudflare.com
- elle.ns.cloudflare.com
DNS records live
- NS
-
- chad.ns.cloudflare.com
- elle.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
_ny8d2ic64i6zaavyuvgw3a3md302347
Email authentication strong
- SPF
-
v=spf1 mx include:spf.rentpayment.com include:mail.zendesk.com include:spf.mandrillapp.com include:aspmx.pardot.com include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:security_email@rentpayment.compolicy: quarantine - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQm9Fr3DVSXO43cxBwugBuqBpBPlQytpLAJxC1x8UKh5QLiSRnQdQxtoGjVs1mtOoWlG54SRnJfIMw… - smtpapi:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…
selectors probed - google:
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 84 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
Header values
- referrer-policy
no-referrer, same-origin, strict-origin, strict-origin-when-cross-origin- permissions-policy
accelerometer=(), autoplay=(), camera=(), clipboard-read=(self), clipboard-write=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(self "https://cdn.plaid.com" "https://*.mrisoftware.com"), usb=(), fullscreen=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://cdn.plaid.com; base-uri 'self'; style-src 'self' 'unsafe-inline' https://www.rentpayment.com https://*.mrisoftware.com https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src 'self' data: https://*.getflex.com https://fonts.gstatic.com; img-src 'self' data: w3.org/svg/2000 http://www.google-analytics.com https://stats.g.doubleclick.net https://images.scanalert.com https://www.mcafeesecure.com https://*.mrisoftware.com https://*.azureedge.net https://*.core.windows.net https://*.getflex.com https://*.pinata.ai https://sandbox-pinata-ai.s3.amazonaws.com; frame-ancestors 'self'; frame-src 'self' https://tst.kaptcha.com https://*.bestegg.com https://*.tillstaging.xyz https://cdn.plaid.com https://www.google.com https://*.mrisoftware.com https://mrisaas.oktapreview.com https://mrisaas.okta.com https://*.getflex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://rentpayment.com https://*.rentpayment.com http://www.google-analytics.com https://www- strict-transport-security
max-age=31536000; includeSubDomains