terumotmp.com
HTML metadata
Technology
- CDN
- Azure Front Door
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- nexus.ensighten.com×1
- www.googletagmanager.com×1
Contact
Registration
- Registrar
- Network Solutions, LLC
- Created
- 2007-07-23
- Expires
- 2028-07-23 795 days left
- Updated
- 2025-07-13
- Name servers
-
- ns1-02.azure-dns.com
- ns2-02.azure-dns.net
- ns3-02.azure-dns.org
- ns4-02.azure-dns.info
DNS records live
- NS
-
- ns1-02.azure-dns.com
- ns2-02.azure-dns.net
- ns3-02.azure-dns.org
- ns4-02.azure-dns.info
- MX
-
- 10 mxa-004b8c01.gslb.pphosted.com
- 10 mxb-004b8c01.gslb.pphosted.com
- TXT
-
5vmbL/dKThxiOi1pXzIHXXuYG/qQiznCqxlXsISFErlIV6qBu3WxsfMecrOd/D6HO4JHIiJZtfN2LYRQf3IqqA==google-site-verification=a4-YkRz8N6WOPzywTyrYAUwnK-fgXY-HhPWSFDRCDZkMS=ms22433311
Email authentication strong
- SPF
-
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;fo=1policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
GeoTrust TLS RSA CA G1
Expires in 148 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src * 'self'; style-src https://embed.typeform.com https://amp.azure.net 'self' 'unsafe-inline'; script-src https://embed.typeform.com https://www.google.com https://nexus.ensighten.com https://extend.vimeocdn.com https://nexus-test.ensighten.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://script.hotjar.com https://static.hotjar.com https://amp.azure.net https://player.vimeo.com https://www.youtube.com 'self' 'unsafe-eval' 'unsafe-inline'; object-src * 'self'; img-src * 'self' ;worker-src * 'self' blob:; media-src * 'self' blob:; connect-src * 'self'; frame-src * 'self';- strict-transport-security
max-age=31536000; includeSubDomains; preload