victorpest.com
HTML metadata
Technology
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
- Fonts
-
- Font Awesome
- Google Fonts
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (9)
- fonts.googleapis.com×3
- js.klevu.com×2
- polaris.truevaultcdn.com×2
- a40.usablenet.com×1
- rum.hlx.page×1
- statsjs.klevu.com×1
- use.fontawesome.com×1
- www.googletagmanager.com×1
- www.youtube.com×1
Social
Registration
- Registrar
- DomainSpot LLC
- Created
- 1997-05-22
- Expires
- 2029-05-23 1085 days left
- Updated
- 2024-03-01
- Name servers
-
- ns.rackspace.com
- ns2.rackspace.com
DNS records live
- NS
-
- ns.rackspace.com
- ns2.rackspace.com
- MX
-
- 10 mx1.privateemail.com
- 10 mx2.privateemail.com
- TXT
-
ccbed16c549543f53b04ae39034ba01e.victorpest.com
- Verified for
-
- GlobalSign
Email authentication strong
- SPF
-
v=spf1 include:_spf.victorpest_com._d.easydmarc.pro ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=reject;sp=none;rua=mailto:4472595daa@rua.easydmarc.us;ruf=mailto:4472595daa@ruf.easydmarc.us;fo=1;policy: reject (enforced) · sp=none - DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 83 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
base-uri 'self'; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com https://www.gstatic.com https://fonts.gstatic.com *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com use.fontawesome.com data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; frame-ancestors www.paypalobjects.com https://auth.services.adobe.com/ *.certcapture.com 'self'; form-action https://enews.dynatrap.com/ https://enews.terro.com/ https://enews.victorpest.com/ https://enews.havahart.com/ https://enews.mosquitomagnet.com/ https://enews.perkypet.com/ https://enews.saferbrand.com/ https://enews.zarebasystems.com/ https://enews.vlink.victorpest.com/ https://enews.woodstreambrands.ca/ geostag.cardinalcommerce.com geo.cardinalcommer- strict-transport-security
max-age=31536000; includeSubDomains; preload