wemind.io
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (8)
- d3o3obo12bi5zc.cloudfront.net×128
- ga.jspm.io×13
- cdn.jsdelivr.net×2
- sibforms.com×2
- cdn.datatables.net×1
- code.jquery.com×1
- esm.sh×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- ns-209-b.gandi.net
- ns-235-c.gandi.net
- ns-246-a.gandi.net
- MX
-
- 1 aspmx.l.google.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
google-site-verification=GkGuRJ9kMlIfcefMOFikWezVucZgMnncmnCDgMT7RaEbrevo-code:7a39dc13fe9aaf136223bceb3e8ba913google-site-verification=OXseFkHR1R8H404nTgEMAFDp96G-2LRlN1nrIDmBjEc
Email authentication partial
- SPF
-
v=spf1 include:_spf.google.com include:spf.mailjet.com include:servers.mcsv.net include:helpscoutemail.com ?allneutral (?all) - DMARC
-
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.compolicy: none (monitoring only) - DKIM
-
- k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - mail:
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed - k1:
Certificate (current)
GandiCert
Expires in 152 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), gyroscope=(), microphone=(), usb=(), payment=(), geolocation=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' https: https://client.crisp.chat; connect-src 'self' https: https://storage.crisp.chat wss://client.relay.crisp.chat wss://stream.relay.crisp.chat *.algolianet.com *.algolia.net https://region1.google-analytics.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io; font-src 'self' https: data:; img-src 'self' https: data: https://image.crisp.chat https://storage.crisp.chat https://region1.google-analytics.com; object-src 'none'; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval' https://settings.crisp.chat *.algolia.net; style-src 'self' https: 'unsafe-inline'; media-src 'self' https:- strict-transport-security
max-age=63072000; includeSubDomains