spartanrvchassis.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (5)
- fonts.googleapis.com×2
- www.googletagmanager.com×2
- fonts.gstatic.com×1
- gmpg.org×1
- www.google.com×1
Social
Contact
- Phone
Registration
- Registrar
- Cloudflare, Inc.
- Created
- 2015-02-26
- Expires
- 2027-02-26 281 days left
- Updated
- 2022-11-15
- Name servers
-
- simon.ns.cloudflare.com
- sue.ns.cloudflare.com
DNS records live
- NS
-
- simon.ns.cloudflare.com
- sue.ns.cloudflare.com
- MX
-
- 10 mailstream-east.mxrecord.io
- 10 mailstream-west.mxrecord.io
- 5 mailstream-central.mxrecord.mx
Email authentication strong
- SPF
-
v=spf1 include:spf.mlwrx.com include:aspmx.pardot.com include:spf.protection.outlook.com include:sendgrid.net include:plexonline.com include:spf-us.emailsignatures365.com ip4:72.8.246.139 ip4:166.90.240.82 ip4:12.198.137.34 ip4:99.32.122.169 ip4:8.40.130.0/24 -allstrict (-all) - DMARC
-
v=DMARC1;p=quarantine;pct=100;rua=mailto:4f5264204f264d7b91c5c1920c2ee191@dmarc-reports.cloudflare.netpolicy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aENmfS+q+xt/aefJnizyGNveLOXIIpAg+Thq8hGAx1d2aHI8stRIYHLepwr8+ba3BOlLwEiX8cy/4…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 35 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-content-type-options
nosniff- content-security-policy
connect-src 'self' www.google-analytics.com tr.snapchat.com stats.g.doubleclick.net maps.googleapis.com; default-src 'self'; font-src 'self' fonts.gstatic.com data:; frame-src 'self' www.google.com www.facebook.com theshyftgroup.gcs-web.com www.youtube.com; img-src 'self' data: secure.gravatar.com tr.snapchat.com www.google.com www.facebook.com maps.gstatic.com www.theshyftgroup.com maps.googleapis.com www.google-analytics.com img.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com; script-src-elem 'self' 'unsafe-inline' www.googletagmanager.com googletagmanager.com google.com www.google.com www.gstatic.com www.google-analytics.com static.hotjar.com static.cloudflareinsights.com www.youtube.com connect.facebook.com pi.pardot.com tr.snapchat.com sc-static.net connect.facebook.net script.hotjar.com maps.googleapis.com cdnjs.cloudflare.com *.cloudflare.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com;- strict-transport-security
max-age=31536000; includeSubDomains; preload