uma-pen.com
HTML metadata
Technology
- CDN
- Cloudflare
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- js-eu1.hs-scripts.com×1
- www.googletagmanager.com×1
Social
Contact
Registration
- Registrar
- Mesh Digital Limited
- Created
- 2005-01-12
- Expires
- 2027-01-12 237 days left
- Updated
- 2026-01-11
- Name servers
-
- drew.ns.cloudflare.com
- nova.ns.cloudflare.com
DNS records live
- NS
-
- drew.ns.cloudflare.com
- nova.ns.cloudflare.com
- MX
-
- 10 umapen-com0i.mail.protection.outlook.com
- TXT
-
GPuyHbkNQGdLcMQJJXYoQiI9E9Y=MS=ms61405845hbpk58n67es40shk3ja8sshe5e
Email authentication partial
- SPF
-
v=spf1 mx a include:ispgateway.de include:spf.protection.outlook.com ip4:217.91.67.170 ip4:92.205.16.186 ip4:87.128.60.208 include:144062202.spf04.hubspotemail.net -allstrict (-all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc1@uma-pen.com; ruf=mailto:dmarc2@uma-pen.compolicy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJFMGU4DLSvWiPx3E+DBCxEZZ8aMTC+Z6+QUnflCCORiaqxdQ4BOQ3ZMz1slzbgz6FoahdwG+goL0q…
selectors probed - selector1:
Certificate (current)
Starfield Secure Certificate Authority - G2
Expires in 152 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src 'none'; connect-src 'self' https://consentcdn.cookiebot.com https://*.analytics.google.com https://*.google-analytics.com https://www.google.de https://stats.g.doubleclick.net https://*.hsforms.com https://*.hubspot.com https://*.amazonaws.com https://*.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://consentcdn.cookiebot.com https://www.youtube-nocookie.com https://www.uma-pen.com *.hsforms.com; img-src 'self' data: https://www.googletagmanager.com https://www.google.de https://www.google-analytics.com https://imgsct.cookiebot.com/ https://*.hubspot.com https://*.hsforms.com https://*.hubspotusercontent-eu1.net https://www.uma-pen.com https://maps.gstatic.com https://*.googleapis.com; media-src 'self'; object-src 'self'; script-src 'nonce-bR92Ldaopa2l+roPDkBbtItBhE0=' 'self' 'strict-dynamic' https://www.googletagmanager.com; script-src-elem 'nonce-bR92Ldaopa2l+roPDkBbtItBhE0=' 'self' 'strict-dynamic'; style-src 's- strict-transport-security
max-age=31536000; includeSubDomains