sinclairoil.com
HTML metadata
Technology
- Server
- nginx
- CMS
- Drupal
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (7)
- cdn.jsdelivr.net×9
- assets.sitescdn.net×2
- unpkg.com×2
- marvel-b2-cdn.bc0a.com×1
- maxcdn.bootstrapcdn.com×1
- use.typekit.net×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- GoDaddy Corporate Domains, LLC
- Created
- 1995-08-02
- Expires
- 2033-01-04 2422 days left
- Updated
- 2024-02-21
- Name servers
-
- ns03.gcd-dns.com
- ns04.gcd-dns.com
DNS records live
- NS
-
- ns03.gcd-dns.com
- ns04.gcd-dns.com
- MX
-
- 10 us-smtp-inbound-1.mimecast.com
- 10 us-smtp-inbound-2.mimecast.com
- TXT
-
Show 10 TXT records
MS=ms13969471mandrill_verify.4h3b_vfP1OLrD-ydcymwyQapple-domain-verification=rhBZy9s2MCrVSxB6spycloud-domain-verification=3e5aa226-4e90-47bd-b918-eff9af2dc5c5cisco-ci-domain-verification=410b88e089019fa8acdfa653beee79439770ffb7a0c50e0b8d51db7323f92eb1MS=ms99443590MS=5A041B715B770E0C78C907BEA62A98354DA4711BEUzulIzNjHOgD4rqijhrNKh7YUkpmwPHKiL9J1yOCFqCDD9qMySqB1SlvzJT7BVKVpY8DZUlxzyNQh4/M2sPLg==atlassian-domain-verification=UGzCNpslUkKPj6yvhXWH72xunMEtBs4G4pxeXDa2SdiCoSHMtomxuCuakWSryBaEduo_sso_verification=QjXKBt81z0Lw7AYf9EnehzTzmj39WZuKiNw4F8aK3twAtN33VVEYHVtHzGLpk8gW
Email authentication partial
- SPF
-
v=spf1 a ip4:38.146.100.111 ip4:38.84.63.111 include:us._netblocks.mimecast.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=nonepolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 53 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
connect-src *; img-src 'self' data: https://www.google-analytics.com https://www.youtube.com https://maps.googleapis.com https://maps.gstatic.com; object-src 'none'; script-src * 'report-sample' 'unsafe-inline'; style-src * 'report-sample' 'unsafe-inline'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'- strict-transport-security
max-age=300