senecafoundry.com
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- fonts.googleapis.com×3
- fonts.gstatic.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- 240 Mackinlay Kantor Dr, Webster City, IA
Registration
- Registrar
- DNC Holdings, Inc.
- Created
- 1999-07-05
- Expires
- 2031-07-05 1873 days left
- Updated
- 2026-04-06
- Name servers
-
- ns1.cyprusweb.com
- ns2.cyprusweb.com
- ns3.cyprusweb.com
- ns4.cyprusweb.com
DNS records live
- NS
-
- ns1.cyprusweb.com
- ns2.cyprusweb.com
- ns3.cyprusweb.com
- ns4.cyprusweb.com
- MX
-
- 0 senecafoundry-com.mail.protection.outlook.com
- TXT
-
MS=ms75754091i6j6a2eq4ujm5kbn5cebfg71gf7np3hm4kamfpg67sf124cu17kn
Email authentication partial
- SPF
-
v=spf1 ip4:72.18.69.7 include:spf.protection.outlook.com include:spf.globalreach.com -allstrict (-all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprdb7LzleFzXHSx+I3bCRA5cdCnDgZ4Axe8fO/GuTq2C2hi795j60xCsUQhe4ukOCNu7g1P6sF6/tJ… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XTmsa829oPvIsJj+BUGMF4lfoZ0X/ljrL16QG1fT6tfGmqh+5MXgbu5TN6f2So+gM4hzI19z+wnSh…
selectors probed - selector1:
Certificate (current)
R12
Expires in 68 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
script-src 'self' 'nonce-Zmk5QmNNRWxsUm53K0JaSmZGTTV1UT09' 'unsafe-eval' *.globalreach.com analytics.globalreach.com *.authorize.net *.stripe.com lib.paymentjs.firstdata.com *.paypalobjects.com www.paypalobjects.com code.jquery.com *.googleapis.com ct.pinterest.com s.pinimg.com www.facebook.com connect.facebook.net *.sharethis.com platform-api.sharethis.com *.twitter.com *.googletagmanager.com tagmanager.google.com *.google-analytics.com www.google-analytics.com *.g.doubleclick.net googleads.g.doubleclick.net *.googlesyndication.com *.googleadservices.com *.google.com cdn.jsdelivr.net www.youtube.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'nonce-Zmk5QmNNRWxsUm53K0JaSmZGTTV1UT09' blob: *.globalreach.com analytics.globalreach.com *.authorize.net *.stripe.com lib.paymentjs.firstdata.com *.paypalobjects.com www.paypalobjects.com *.googleapis.com code.jquery.com www.facebook.com connect.facebook.net ct.pinterest.com s.pinimg.com *.sharethis.com platform-api.sharethi- strict-transport-security
max-age=31536000; includeSubDomains; preload;