vintageroadtripcollection.com
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
- jQuery
- 3.7.1
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- cdn.by.wonderpush.com×1
- fonts.gstatic.com×1
- hcaptcha.com×1
- www.googletagmanager.com×1
Contact
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2019-11-18
- Expires
- 2027-11-18 532 days left
- Updated
- 2025-11-19
- Name servers
-
- ns8015.hostgator.com
- ns8016.hostgator.com
DNS records live
- NS
-
- ns8015.hostgator.com
- ns8016.hostgator.com
- MX
-
- 0 mail.vintageroadtripcollection.com
- Verified for
-
- Brevo
Email authentication partial
- SPF
-
v=spf1 a mx include:websitewelcome.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.compolicy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0v30S1fRg/JYXYRzwVxwCyf/glz+z+y7z4pdaIFDOM2n8yWQm5H/2LKm15/H3hiBPgzOkZTkrr3dG…
selectors probed - default:
Certificate (current)
R13
Expires in 45 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
fullscreen=(self), autoplay=(self), geolocation=(), camera=(), microphone=(), gyroscope=(), accelerometer=(), payment=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' https: data: blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.hcaptcha.com https://*.youtube.com https://s.ytimg.com https://www.google.com https://www.gstatic.com https://recaptcha.net https://googleadservices.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://*.gstatic.com https://*.googleapis.com; frame-src 'self' https://*.hcaptcha.com https://www.google.com https://recaptcha.net https://www.googletagmanager.com https://*.youtube.com; connect-src 'self' https:;- strict-transport-security
max-age=31536000; includeSubDomains; preload