workinggenius.com
HTML metadata
Technology
- CDN
- Cloudflare
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (5)
- www.googletagmanager.com×4
- cdn-cookieyes.com×3
- cdn.weglot.com×3
- challenges.cloudflare.com×3
- tally.so×3
Registration
- Registrar
- DNC Holdings, Inc.
- Created
- 2015-09-29
- Expires
- 2033-09-29 2690 days left
- Updated
- 2024-08-20
- Name servers
-
- ara.ns.cloudflare.com
- bjorn.ns.cloudflare.com
DNS records live
- NS
-
- ara.ns.cloudflare.com
- bjorn.ns.cloudflare.com
- MX
-
- 10 workinggenius-com.mail.protection.outlook.com
- TXT
-
0ed1fe018acdd217f729e74ed4b048e848b46e7f4aapple-domain-verification=y69Bu13AimCP68Ulgoogle-site-verification=ljMzpgewDn3B4BGW4uPJPMuuRNJRMo2LOOrKtKLLgFg
Email authentication strong
- SPF
-
v=spf1 include:spfa.cpmails.com include:spf.protection.outlook.com include:sendgrid.net include:_spf.qualtrics.com include:emsd1.com include:amazonses.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=quarantine;pct=100;rua=mailto:1c64c4d807c94b89b66664b70866a76f@dmarc-reports.cloudflare.net,mailto:re+h5bcimz3wmh@dmarc.postmarkapp.com;ri=86400;fo=1;sp=quarantine; aspf=r;policy: quarantine · sp=quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kN8u+ZkMnNIH1DUnBdoZyKZkA7bS7T9Zrt1Bwd25vnLX/Ic7SWdam1ZR778geZqOnmsve40l3c8AR…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 79 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; img-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://*.googleapis.com https://tally.so https://*.weglot.com https://*.google.com; script-src 'self' 'unsafe-inline' https://*.cloudflare.com https://*.cookieyes.com https://cdn-cookieyes.com https://*.stripe.com https://*.facebook.net https://*.googletagmanager.com https://*.google-analytics.com https://*.googlesyndication.com https://*.doubleclick.net https://*.weglot.com https://tally.so https://*.gstatic.com https://*.googleapis.com https://*.ads-twitter.com https://*.twitter.com https://*.linkedin.com https://*.licdn.com https://*.hotjar.com https://*.google.com https://*.commoninja.com https://*.cloudfront.net https://tablegroup.activehosted.com; connect-src 'self' https: wss://*.hotjar.com; media-src 'self' https://*.vimeo.com https://*.captivate.fm https://*.clo- strict-transport-security
max-age=31536000