singaporepools.com.sg
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- www.singaporepools.com.sg×37
- fonts.googleapis.com×2
- fonts.gstatic.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- jupiter.singaporepools.com.sg
- libra.singaporepools.com.sg
- mars.singaporepools.com.sg
- MX
-
- 5 singaporepools-com-sg.mail.protection.outlook.com
- TXT
-
Show 4 TXT records
_76yazo9jbbn70z8v8l9lsw4ay47fc2lv=spf1 ip4:103.2.180.200 ip4:203.117.131.219 ip4:20.5.82.25 ip4:20.5.80.155 include:spf.protection.outlook.com -alldtm-domain-verification=tAFLQdBPhmp7acOxFmPyWoQi5-U6cr4f65zkJCowCOwknowbe4-site-verification=769ab28294a613ff2048074eed956f88
- Verified for
-
- Dynamics 365
- GlobalSign
- Microsoft 365
Certificate (current) wrong cert
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 120 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- weak frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN, SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, frame-ancestors none';- strict-transport-security
max-age=31536000; includeSubDomains; preload