vocusgr.com

HTML metadata

Title: Quorum (fka Cision GR)

Registration

Registrar

GoDaddy.com, LLC

Created

1999-09-29

Expires

2026-06-18 30 days left

Updated

2025-06-19

Name servers

ns-1526.awsdns-62.org
ns-1682.awsdns-18.co.uk
ns-182.awsdns-22.com
ns-529.awsdns-02.net

DNS records live

NS

ns-1526.awsdns-62.org
ns-1682.awsdns-18.co.uk
ns-182.awsdns-22.com
ns-529.awsdns-02.net

MX

10 mx.vocusgr.com

TXT

google-site-verification=jC-u2qrM4rKP1rGJnBhYoenEBCvOpODJdqDJKOgsQjo

Email authentication weak

SPF: v=spf1 ip4:65.123.29.211/32 ip4:65.123.29.212/32 ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M01

from 2026-01-01 to 2027-01-31

Expires in 257 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://vocusgr.com/Login.aspx

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), camera=(), display-capture=(), document-domain=(self), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: chrome-extension: moz-extension: admin.mplatform.io:* afge.okta.com:* ajax.googleapis.com:* apis.google.com:* app.pendo.io:* app1.vocusgr.com:* app3.vocusgr.com:* app6.vocusgr.com:* app7.vocusgr.com:* app8.vocusgr.com:* cdn.honey.io:* cdn.jsdelivr.net:* cdn.leanlibrary.app:* cdn.pendo.io:* cdn.scite.ai:* cdn.segment.com:* cdn.ymaws.com:* cdnapisec.kaltura.com:* cdnjs.clery.com:* cdnjs.cloudflare.com:* clientstream.launchdarkly.com:* code.jcloudflare.com:* code.jquery.com:* connect.facebook.net:* cosmicimg-prod.services.web.outlook.com:* data.pendo.io:* dupe.com:* ekr.zdassets.com:* example.com:* files.constantcontact.com:* fonts.googleapis.com:* fonts.gstatic.com:* googleapis.com:* httnts.gstatic.com:* images.simplycodes.com:* imgssl.constantcontact.com:* mail.google.com:* maxcdn.bootstrapcdn.com:* mertsplus.com:* mm-static.mustcheck.com:* p.typekit.net:* p27.zdusercontent.com:* pendo-static-5705677504380928.storage.googleapi
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: chrome-extension: moz-extension: admin.mplatform.io:* afge.okta.com:* ajax.googleapis.com:* apis.google.com:* app.pendo.io:* app1.vocusgr.com:* app3.vocusgr.com:* app6.vocusgr.com:* app7.vocusgr.com:* app8.vocusgr.com:* cdn.honey.io:* cdn.jsdelivr.net:* cdn.leanlibrary.app:* cdn.pendo.io:* cdn.scite.ai:* cdn.segment.com:* cdn.ymaws.com:* cdnapisec.kaltura.com:* cdnjs.clery.com:* cdnjs.cloudflare.com:* clientstream.launchdarkly.com:* code.jcloudflare.com:* code.jquery.com:* connect.facebook.net:* cosmicimg-prod.services.web.outlook.com:* data.pendo.io:* dupe.com:* ekr.zdassets.com:* example.com:* files.constantcontact.com:* fonts.googleapis.com:* fonts.gstatic.com:* googleapis.com:* httnts.gstatic.com:* images.simplycodes.com:* imgssl.constantcontact.com:* mail.google.com:* maxcdn.bootstrapcdn.com:* mertsplus.com:* mm-static.mustcheck.com:* p.typekit.net:* p27.zdusercontent.com:* pendo-static-5705677504380928.storage.googleapi