Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

different ip addresses with diff. status

Checked:
16.05.2024 03:59:19

Older results

K - 14.05.2024 19:14:42

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
careers.nbda.com	CNAME	partner.careerwebsite.com	yes	1	0
	CNAME	www.careerwebsite.com	yes
www.careers.nbda.com		Name Error	yes	1	0
careers.nbda.com	A	3.217.168.14 Ashburn/Virginia/United States (US) - Amazon Technologies Inc. No Hostname found	no
	A	3.217.202.200 Ashburn/Virginia/United States (US) - Amazon Technologies Inc. No Hostname found	no
	A	100.24.151.19 Ashburn/Virginia/United States (US) - Amazon.com No Hostname found	no
*.nbda.com	A	173.249.144.164	yes
	AAAA		yes
	CNAME		yes
*.careers.nbda.com	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 5613, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2024, 00:00:00 +, Signature-Inception: 11.05.2024, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 28.05.2024, 17:00:00 +, Signature-Inception: 15.05.2024, 16:00:00 +, KeyTag 5613, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 5613 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 956, Flags 256


	Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 22.05.2024, 14:02:35 +, Signature-Inception: 07.05.2024, 13:57:35 +, KeyTag 19718, Signer-Name: com


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: nbda.com
nbda.com	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "a7i8111atb2sie0cctcqf9an2divkfkl" between the hashed NSEC3-owner "a7i7u1egfsagtd2hdd6kghtioaqbfrcb" and the hashed NextOwner "a7i84ri8s7pb49mo2gpk7g3p9itvkr1e". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner a7i7u1egfsagtd2hdd6kghtioaqbfrcb.com., Algorithm: 13, 2 Labels, original TTL: 86400 sec, Signature-expiration: 22.05.2024, 06:12:34 +, Signature-Inception: 15.05.2024, 05:02:34 +, KeyTag 956, Signer-Name: com


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q2d6ni4i7eqh8na30ns61o48ul8g5". So that domain name is the Closest Encloser of "nbda.com". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 86400 sec, Signature-expiration: 20.05.2024, 04:25:01 +, Signature-Inception: 13.05.2024, 03:15:01 +, KeyTag 956, Signer-Name: com


	0 DNSKEY RR found




Zone: careers.nbda.com
careers.nbda.com	0 DS RR in the parent zone found

Zone: www.careers.nbda.com
www.careers.nbda.com	0 DS RR in the parent zone found

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 5613, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2024, 00:00:00 +, Signature-Inception: 11.05.2024, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 28.05.2024, 17:00:00 +, Signature-Inception: 15.05.2024, 16:00:00 +, KeyTag 5613, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 5613 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 956, Flags 256


	Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 22.05.2024, 14:02:35 +, Signature-Inception: 07.05.2024, 13:57:35 +, KeyTag 19718, Signer-Name: com


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: careerwebsite.com
careerwebsite.com	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "g0918fjgcaqo3jup5smkc0sj6haiv4b3" between the hashed NSEC3-owner "g0915a6hqpgk66sepn0vr6secfqcjtva" and the hashed NextOwner "g091b15gdqu8jh9p3ie93p93r91hv858". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner g0915a6hqpgk66sepn0vr6secfqcjtva.com., Algorithm: 13, 2 Labels, original TTL: 86400 sec, Signature-expiration: 22.05.2024, 05:21:44 +, Signature-Inception: 15.05.2024, 04:11:44 +, KeyTag 956, Signer-Name: com


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q2d6ni4i7eqh8na30ns61o48ul8g5". So that domain name is the Closest Encloser of "careerwebsite.com". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 86400 sec, Signature-expiration: 20.05.2024, 04:25:01 +, Signature-Inception: 13.05.2024, 03:15:01 +, KeyTag 956, Signer-Name: com


	0 DNSKEY RR found




Zone: partner.careerwebsite.com
partner.careerwebsite.com	0 DS RR in the parent zone found

3. Name Servers

Domain	Nameserver	NS-IP
www.careers.nbda.com	• ns5.worldnic.com
nbda.com	• ns5.worldnic.com / 67m80	162.159.26.110 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	• ns6.worldnic.com / 67m77	162.159.27.124 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
com	• a.gtld-servers.net / nnn1-defra-5		•
	• b.gtld-servers.net / nnn1-elwaw4		•
	• c.gtld-servers.net / nnn1-defra-5		•
	• d.gtld-servers.net / nnn1-defra-5		•
	• e.gtld-servers.net / nnn1-par6		•
	• f.gtld-servers.net / nnn1-defra-4		•
	• g.gtld-servers.net / nnn1-defra-4		•
	• h.gtld-servers.net / nnn1-defra-4		•
	• i.gtld-servers.net / nnn1-defra-4		•
	• j.gtld-servers.net / nnn1-ein4		•
	• k.gtld-servers.net / nnn1-frmrs-2		•
	• l.gtld-servers.net / nnn1-ein1		•
	• m.gtld-servers.net / nnn1-frmrs-2		•

careerwebsite.com	• ns-1265.awsdns-30.org / 3bc1110bbbbbfb19153f993895ce402d -	205.251.196.241 Herndon/Virginia/United States (US) - Amazon.com	•
	•	2600:9000:5304:f100::1 Herndon/Virginia/United States (US) - Crown Castle Fiber LLC	•
	• ns-198.awsdns-24.com / b01d92974fc6ac4d489e9b2f490004bd -	205.251.192.198 Ashburn/Virginia/United States (US) - Amazon.com	•
	•	2600:9000:5300:c600::1 Seattle/Washington/United States (US) - Crown Castle Fiber LLC	•
	• ns-2025.awsdns-61.co.uk / 662eef6469ffb9504834fe06207b8bc8 -	205.251.199.233 London/England/United Kingdom (GB) - Amazon.com	•
	•	2600:9000:5307:e900::1 Seattle/Washington/United States (US) - Crown Castle Fiber LLC	•
	• ns-607.awsdns-11.net / 860e272172777caa66628af3b2e9568a -	205.251.194.95 Sterling/Virginia/United States (US) - Amazon.com	•
	•	2600:9000:5302:5f00::1 Seattle/Washington/United States (US) - Crown Castle Fiber LLC	•
com	• a.gtld-servers.net / nnn1-defra-5		•
	• b.gtld-servers.net / nnn1-elwaw4		•
	• c.gtld-servers.net / nnn1-defra-5		•
	• d.gtld-servers.net / nnn1-par6		•
	• e.gtld-servers.net / nnn1-par6		•
	• f.gtld-servers.net / nnn1-defra-4		•
	• g.gtld-servers.net / nnn1-defra-4		•
	• h.gtld-servers.net / nnn1-defra-4		•
	• i.gtld-servers.net / nnn1-defra-4		•
	• j.gtld-servers.net / nnn1-frmrs-2		•
	• k.gtld-servers.net / nnn1-frmrs-2		•
	• l.gtld-servers.net / nnn1-frmrs-2		•
	• m.gtld-servers.net / nnn1-frmrs-2		•

4. SOA-Entries

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1715824739
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	86400
num Entries:	11

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1715824754
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	86400
num Entries:	2

Domain:	nbda.com
Zone-Name:	nbda.com
Primary:	ns5.worldnic.com
Mail:	namehost.WORLDNIC.com
Serial:	123041103
Refresh:	10800
Retry:	3600
Expire:	604800
TTL:	3600
num Entries:	2

Domain:	www.careers.nbda.com
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1


Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1715824754
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	86400
num Entries:	1

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1715824769
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	86400
num Entries:	12

Domain:	careerwebsite.com
Zone-Name:	careerwebsite.com
Primary:	ns-607.awsdns-11.net
Mail:	awsdns-hostmaster.amazon.com
Serial:	1
Refresh:	7200
Retry:	900
Expire:	1209600
TTL:	86400
num Entries:	8

5. Screenshots

Startaddress: https://careers.nbda.com/, address used: https://careers.nbda.com/, Screenshot created 2024-05-16 04:11:47 +00:0

Mobil (412px x 732px)

1046 milliseconds

Screenshot mobile - https://careers.nbda.com/

Mobil + Landscape (732px x 412px)

1041 milliseconds

Screenshot mobile landscape - https://careers.nbda.com/

Screen (1280px x 1680px)

1166 milliseconds

Screenshot Desktop - https://careers.nbda.com/

Mobile- and other Chrome-Checks

	width	height
visual Viewport	412	732
content Size	412	732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://careers.nbda.com/ 3.217.168.14	301	https://careers.nbda.com/	1.513
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:05:51 GMT
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=~J1uq_7WMML1W9gDoM78zMoQRk4Nxo002wpVdRIBBFxTPWGq3sr~5x5HTLKmZf_DO50V5XucJz8a7rvfdrbPNfkQ3I1UxrmHEZeGPJcp7XuGizJ0dyVYYU01dwgV9Jq2; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax, AWSALB=cMjrxqcVDfK3++2T10+niUiHgHw9NJXy7os7p74/axIQkOn4TxJyNWx0D32YyF3xLfF7irwNyNMPa8mFWJc2yYhGUlUb6+DFWj+5S6JNWNcJqu6txrByd9VyRxmU; Expires=Thu, 23 May 2024 02:05:50 GMT; Path=/, AWSALBCORS=cMjrxqcVDfK3++2T10+niUiHgHw9NJXy7os7p74/axIQkOn4TxJyNWx0D32YyF3xLfF7irwNyNMPa8mFWJc2yYhGUlUb6+DFWj+5S6JNWNcJqu6txrByd9VyRxmU; Expires=Thu, 23 May 2024 02:05:50 GMT; Path=/; SameSite=None, cfid=476145c7-9794-498e-a566-3bc03c17e3ba;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:55 UTC;HTTPOnly, cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:55 UTC;HTTPOnly, JSESSIONID=4F42D3B987E3CD6ADE9C435655A2AD04; Path=/; HttpOnly; Secure, careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:15:51 UTC;Secure;HTTPOnly
Cache-Control: private
Location: https://careers.nbda.com/
X-AspNet-Version: 4.0.30319
X-UA-Compatible: IE=edge
X-Frame-Options: sameorigin, DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Content-Type: text/html; charset=UTF-8
Content-Length: 0

• http://careers.nbda.com/ 3.217.202.200	307	http://careers.nbda.com/home/index.cfm?	1.240
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:05:52 GMT
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=3cihilwmvu1ylPoD9Jq9zoBU9by3HkJnFUee~_xUdMzfosmsenOJAwqMSR0bwSfIvkxBa1CCD9kCfyxgrfoqi6sztCyRshOFIH538miUYbLojTqEZws1ffqym05_f3uu; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax, AWSALB=0uZAz9sALlS5Lzgx1jhHe0GhCeR35CXdNQCv2h4kR6/CreAAtVpgxkiR6hPCyn2fa2KNy4VrLprwjIAf7wa9nx8Y9PqT/o08d0Z2zd3fheb3LOped+qgkuFRVSZ/; Expires=Thu, 23 May 2024 02:05:51 GMT; Path=/, AWSALBCORS=0uZAz9sALlS5Lzgx1jhHe0GhCeR35CXdNQCv2h4kR6/CreAAtVpgxkiR6hPCyn2fa2KNy4VrLprwjIAf7wa9nx8Y9PqT/o08d0Z2zd3fheb3LOped+qgkuFRVSZ/; Expires=Thu, 23 May 2024 02:05:51 GMT; Path=/; SameSite=None
Cache-Control: private
Location: /home/index.cfm?
X-AspNet-Version: 4.0.30319
X-UA-Compatible: IE=edge
X-Frame-Options: sameorigin, DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Content-Length: 0

• http://careers.nbda.com/ 100.24.151.19	307	http://careers.nbda.com/home/index.cfm?	1.240
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:05:49 GMT
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=DND2SYxlO8GNPDaTvrS~GHRMh6o8gR~fworjlJHZib~WRnjg8EZ7l26~w1lWjwPShVOAVxMrxLntWKoMA8jUC1KBCx5u32rFNlzE394d_GxIHUcj2O7d~yHmhzZ5UWsO; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax, AWSALB=1x4aTcu0MixbtiaGSYBqUC1R7/qIJ0vfrB/4tsyt95nH6BTekMOdYT+PJbgTg5oKjeyA5wjZaOyW3mcVuIN0JM3Y1KpqRDJ/gfogyiMbkDLe2mND/4mZt/LPjh3X; Expires=Thu, 23 May 2024 02:05:48 GMT; Path=/, AWSALBCORS=1x4aTcu0MixbtiaGSYBqUC1R7/qIJ0vfrB/4tsyt95nH6BTekMOdYT+PJbgTg5oKjeyA5wjZaOyW3mcVuIN0JM3Y1KpqRDJ/gfogyiMbkDLe2mND/4mZt/LPjh3X; Expires=Thu, 23 May 2024 02:05:48 GMT; Path=/; SameSite=None
Cache-Control: private
Location: /home/index.cfm?
X-AspNet-Version: 4.0.30319
X-UA-Compatible: IE=edge
X-Frame-Options: sameorigin, DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Content-Length: 0

• http://careers.nbda.com/home/index.cfm?	301	https://careers.nbda.com/	1.893
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:06:46 GMT
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=3mdrm_3O7UnYvrq~Ur8Eo3OiVWfi5YFITTMSl4v~CdUezUYytc_Hs4a9w~PUuXgr7LfJb6cA3VAmX6ISzhUx6GvvYXfTFS2OGusSo~rnJMpKw1OQYNKKL~bMjqxYSzvs; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax, AWSALB=1XQ8BjPzOXuT3StjJAh62U/f9JtVM7h2vKT0veJQnHK8ewValMQ75oSK2penivhNDmx+nlM80TS/A8oOFj3brJpmgbdsfgNDzdgw6wb1wJsnxBSLg43TFaDIC0le; Expires=Thu, 23 May 2024 02:06:44 GMT; Path=/, AWSALBCORS=1XQ8BjPzOXuT3StjJAh62U/f9JtVM7h2vKT0veJQnHK8ewValMQ75oSK2penivhNDmx+nlM80TS/A8oOFj3brJpmgbdsfgNDzdgw6wb1wJsnxBSLg43TFaDIC0le; Expires=Thu, 23 May 2024 02:06:44 GMT; Path=/; SameSite=None, cfid=76f83f6a-209c-4d16-853f-6178f6b41ae1;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:49 UTC;HTTPOnly, cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:49 UTC;HTTPOnly, JSESSIONID=5F031BBC97D4DD4EDC02D0EA149BA49F; Path=/; HttpOnly; Secure, careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:46 UTC;Secure;HTTPOnly
Cache-Control: private
Location: https://careers.nbda.com/
X-AspNet-Version: 4.0.30319
X-UA-Compatible: IE=edge
X-Frame-Options: sameorigin, DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Content-Type: text/html; charset=UTF-8
Content-Length: 0

• https://careers.nbda.com/ 3.217.168.14 Inline-JavaScript (∑/total): 23/89821 Inline-CSS (∑/total): 5/14642	200	Html is minified: 422.82 % Other inline scripts (∑/total): 19/90027	8.187	I
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:06:06 GMT
Transfer-Encoding: chunked
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=UlXHSoMTefhlrX7INOVVFi_F0nmTktvuJb7T3eH0eKWLUWpgY1Dq3VGMqk9myHjIDZWXMSVFTEk7ztXDHvVrGXvF2ifzOdYP_jd_9QHMSoLuBgQk_lLEVRjePzRi4T9B; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax, AWSALB=77pepk7bK6FWC9PhvrnHyUq9Ur3iyNL1crnJBQYoTPmsBNt8eWXKmqs6/xGkqdANcHYNfKwtvCdc354T8cIXP1lO7gjIUZ+bCrGPPuslHqbkuNCIsRQqUpo6VwVq; Expires=Thu, 23 May 2024 02:06:03 GMT; Path=/, AWSALBCORS=77pepk7bK6FWC9PhvrnHyUq9Ur3iyNL1crnJBQYoTPmsBNt8eWXKmqs6/xGkqdANcHYNfKwtvCdc354T8cIXP1lO7gjIUZ+bCrGPPuslHqbkuNCIsRQqUpo6VwVq; Expires=Thu, 23 May 2024 02:06:03 GMT; Path=/; SameSite=None, cfid=9e58bcd7-30fb-4047-b2fd-36e5eacc94c3;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:08 UTC;HTTPOnly, cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:08 UTC;HTTPOnly, JSESSIONID=B61362D6E735F0D23103F017E847112C; Path=/; HttpOnly; Secure, careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:05 UTC;Secure;HTTPOnly, COOKIECONSENT=false;Path=/;Expires=Mon, 15-May-2034 03:59:59 UTC;Secure
Cache-Control: private
Vary: Accept-Encoding
Content-Security-Policy: frame-ancestors 'self'
X-Content-Security-Policy: frame-ancestors 'self'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, ACCEPT, OPTIONS
X-AspNet-Version: 4.0.30319
X-UA-Compatible: IE=edge
X-Frame-Options: sameorigin, DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip

• https://careers.nbda.com/ 3.217.202.200 Inline-JavaScript (∑/total): 23/89821 Inline-CSS (∑/total): 5/14642	200	Html is minified: 423.02 % Other inline scripts (∑/total): 19/90027	7.977	I
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:06:16 GMT
Transfer-Encoding: chunked
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=v4CxevpZCgGs451iq4CjAZBvlvgMyw0Btq4jVLihnvVqeXhtKCCzF8kYK7eO40jtfb_PRTDE26ppbn~trsFPb27A8YJGN4PGmoF6OA4FlZNTrUDfVoxZ68KsuI~3PJWa; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax, AWSALB=DND8ureZFCC8GVuJfWunU+ayvzIOlIedL7kCsqNCQwbMXcyY86Q4PQbMT0c/pw6yzMXaYxTaNAFvxqh4Y18AeiPO2jf+EZAI/ludqe7bmwqyBXxN5zG2GiZRvmNp; Expires=Thu, 23 May 2024 02:06:13 GMT; Path=/, AWSALBCORS=DND8ureZFCC8GVuJfWunU+ayvzIOlIedL7kCsqNCQwbMXcyY86Q4PQbMT0c/pw6yzMXaYxTaNAFvxqh4Y18AeiPO2jf+EZAI/ludqe7bmwqyBXxN5zG2GiZRvmNp; Expires=Thu, 23 May 2024 02:06:13 GMT; Path=/; SameSite=None, cfid=bc4c44a9-5edf-4ac3-acd0-75464e8cf59d;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:18 UTC;HTTPOnly, cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:18 UTC;HTTPOnly, JSESSIONID=CA50E9902371F960816BCFE0534C3C88; Path=/; HttpOnly; Secure, careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:14 UTC;Secure;HTTPOnly, COOKIECONSENT=false;Path=/;Expires=Mon, 15-May-2034 04:00:00 UTC;Secure
Cache-Control: private
Vary: Accept-Encoding
Content-Security-Policy: frame-ancestors 'self'
X-Content-Security-Policy: frame-ancestors 'self'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, ACCEPT, OPTIONS
X-AspNet-Version: 4.0.30319
X-UA-Compatible: IE=edge
X-Frame-Options: sameorigin, DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip

• https://careers.nbda.com/ 100.24.151.19 Inline-JavaScript (∑/total): 23/89821 Inline-CSS (∑/total): 5/14642	200	Html is minified: 422.82 % Other inline scripts (∑/total): 19/90027	8.283	I
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:05:56 GMT
Transfer-Encoding: chunked
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=RE8vKizbJYzOiMgAYxrGU6rd5nSIDerUrn2zTpTXPhmvV7YrmQookhuXwY5t_ER8mh1c8MiOZqz~rWfMiIXO32J0rwiWQNv1tI5qV6_dhHjBADYoOUevk10WumjE3Uuy; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax, AWSALB=mmDmpnQ9rBv+lvMF7eA734l8+uznJ/c/qQaEs9oR9C0pf1NmMuKBA3RE1T2AxynB5217lH3JWe/NG9q2TIJQX6wwNEu0EicRRdaepJbU5Xo32t4Dq6itHoOP7tyj; Expires=Thu, 23 May 2024 02:05:53 GMT; Path=/, AWSALBCORS=mmDmpnQ9rBv+lvMF7eA734l8+uznJ/c/qQaEs9oR9C0pf1NmMuKBA3RE1T2AxynB5217lH3JWe/NG9q2TIJQX6wwNEu0EicRRdaepJbU5Xo32t4Dq6itHoOP7tyj; Expires=Thu, 23 May 2024 02:05:53 GMT; Path=/; SameSite=None, cfid=0c55a7d0-bc69-4ee7-81bd-89b31cdcb697;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:58 UTC;HTTPOnly, cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:58 UTC;HTTPOnly, JSESSIONID=474B4C4869C9F60A6FF061F3199F724D; Path=/; HttpOnly; Secure, careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:15:54 UTC;Secure;HTTPOnly, COOKIECONSENT=false;Path=/;Expires=Mon, 15-May-2034 03:59:59 UTC;Secure
Cache-Control: private
Vary: Accept-Encoding
Content-Security-Policy: frame-ancestors 'self'
X-Content-Security-Policy: frame-ancestors 'self'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, ACCEPT, OPTIONS
X-AspNet-Version: 4.0.30319
X-UA-Compatible: IE=edge
X-Frame-Options: sameorigin, DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip

• http://careers.nbda.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 3.217.168.14 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.07 % Other inline scripts (∑/total): 0/0	0.254
Not Found
Visible Content:
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:06:22 GMT
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=jVs2hfuCi~FsGGlwW0hu5BMaW7bJ3v9I8M56vTAsbgvtdUpluVH3yec0h~~g5c7n0ymnftZdWyW46VvBn~WnBL2jc7Cr5spjO7NnhLzENe8yPilrf_DYmlX0mg7n75Jc; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax
Content-Type: text/html
Content-Length: 153

• http://careers.nbda.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 3.217.202.200 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.07 % Other inline scripts (∑/total): 0/0	0.217
Not Found
Visible Content:
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:06:22 GMT
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=3~p6CNvyYGt9WFP4bKetVZagl7PLyxU5z13~bXq_2jNYEh6uCl8sGTeh1JPSpyNhQNX0iJGpPsq6bLT0Fbss3~pntHf8xLJnasiKQMmJoifl0ZGodxX~YegZI1JYVXwA; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax
Content-Type: text/html
Content-Length: 153

• http://careers.nbda.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 100.24.151.19 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.07 % Other inline scripts (∑/total): 0/0	0.224
Not Found
Visible Content:
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:06:22 GMT
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=aY8UNBVgLe~vddnIiN3EhXEwr5cXTNP3yufOGB92QxS6HE1zIkT4qHu0jWdcmNZrad6HkMjmyb7ZxWGx6WrUiuVjew_k0UoODoN0Dnks5EFVpWLNSf94T~OVwQYKI4ww; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax
Content-Type: text/html
Content-Length: 153

• https://3.217.168.14/ 3.217.168.14	301	https://www.yourmembership.com/	6.090	N
Certificate error: RemoteCertificateNameMismatch
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:06:32 GMT
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=Us_buG2ePe9gAse9VG8acXKpi3ElKDldv_WKAHS5NqNC5Zcxi97bj5Hq8Duuh8bn49_bk0XkReAG2X9FusDGxsXBa7dabjULWCbqwpzs6Vm~dH9hRDa92vRC6Bqa~iny; Max-Age=31536000; Domain=3.217.168.14; Path=/; Secure; SameSite=Lax, AWSALB=T3QjTdLpcrAzX12trMevf96Tsfoe7pBZFOvJYWk+5HV4j4Z7HFyvH4dth7geKMlfKZyNvshZ836N2cLr8t/YtwlgoxvMDmfTarKl5IWzA//EJiv6xbSTEKKDDKVk; Expires=Thu, 23 May 2024 02:06:30 GMT; Path=/, AWSALBCORS=T3QjTdLpcrAzX12trMevf96Tsfoe7pBZFOvJYWk+5HV4j4Z7HFyvH4dth7geKMlfKZyNvshZ836N2cLr8t/YtwlgoxvMDmfTarKl5IWzA//EJiv6xbSTEKKDDKVk; Expires=Thu, 23 May 2024 02:06:30 GMT; Path=/; SameSite=None, cfid=dffb6f70-4663-4ea0-928a-aa357f36ffae;Path=/;Domain=3.217.168.14;Expires=Wed, 05-Jun-2024 03:44:36 UTC;HTTPOnly, cftoken=0;Path=/;Domain=3.217.168.14;Expires=Wed, 05-Jun-2024 03:44:36 UTC;HTTPOnly, JSESSIONID=66815B38537C41A67A57B99205DFF24B; Path=/; HttpOnly; Secure, careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:32 UTC;Secure;HTTPOnly
Cache-Control: private
Location: https://www.yourmembership.com/
X-AspNet-Version: 4.0.30319
X-UA-Compatible: IE=edge
X-Frame-Options: sameorigin, DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Content-Type: text/html; charset=UTF-8
Content-Length: 0

• https://3.217.202.200/ 3.217.202.200	301	https://www.yourmembership.com/	6.370	N
Certificate error: RemoteCertificateNameMismatch
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:06:39 GMT
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=30Zo3fJJFy7g5VJo4k0H8wfwfBj5M1HxkDEA88P2rmCWiNiWiNXr5mxq0D38VYui06q5OJ5dfw3XnmWP4xJEuRZCBLnGZQVn0SyI2uoO5y7vpRAk6f8vJWclSD2ZrC3C; Max-Age=31536000; Domain=3.217.202.200; Path=/; Secure; SameSite=Lax, AWSALB=SBz5U5NszBektFs7fSzpk5zWsadRbXO+RZyt/bhme9zY38ccupxfEGHTYiLPbQ2WhcnMFxTAasTDs8gVDIvfkwx1hoMu6CMor98r2MKJG0GKaUNzudWkVK5xZXyi; Expires=Thu, 23 May 2024 02:06:37 GMT; Path=/, AWSALBCORS=SBz5U5NszBektFs7fSzpk5zWsadRbXO+RZyt/bhme9zY38ccupxfEGHTYiLPbQ2WhcnMFxTAasTDs8gVDIvfkwx1hoMu6CMor98r2MKJG0GKaUNzudWkVK5xZXyi; Expires=Thu, 23 May 2024 02:06:37 GMT; Path=/; SameSite=None, cfid=ece66273-f569-46e6-844e-4ec309772d76;Path=/;Domain=3.217.202.200;Expires=Wed, 05-Jun-2024 03:44:42 UTC;HTTPOnly, cftoken=0;Path=/;Domain=3.217.202.200;Expires=Wed, 05-Jun-2024 03:44:42 UTC;HTTPOnly, JSESSIONID=75DD805621EC5CA69DCB8E3EDCF82B66; Path=/; HttpOnly; Secure, careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:39 UTC;Secure;HTTPOnly
Cache-Control: private
Location: https://www.yourmembership.com/
X-AspNet-Version: 4.0.30319
X-UA-Compatible: IE=edge
X-Frame-Options: sameorigin, DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Content-Type: text/html; charset=UTF-8
Content-Length: 0

• https://100.24.151.19/ 100.24.151.19	301	https://www.yourmembership.com/	6.310	N
Certificate error: RemoteCertificateNameMismatch
Server: nginx/1.25.1
Date: Thu, 16 May 2024 02:06:25 GMT
Connection: close
X-DataDome: protected
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=8x0zJ~949YwX8BAAJE8QfuKtHhwInSO15TKYWbsnRVRm1jcnZvUJOSa9fxTY26NYbtOYkkQb_UQla_0Gof4iwJ4KX~rXEoxqyBcBLWg~37mUI~3toGCO~1VwUWwwELAu; Max-Age=31536000; Domain=100.24.151.19; Path=/; Secure; SameSite=Lax, AWSALB=vg5JQX3Bw9iE23VKXCr8iBLYBuw8JVJQ0IRi31kiEp6HOrUS7OVCKSUe6jFsahJpTwa3q9CHJobCchbjHr/Ko62+9zs4oYbR8ieR7KegGBo3hVQvh9OhfQmp5mjZ; Expires=Thu, 23 May 2024 02:06:23 GMT; Path=/, AWSALBCORS=vg5JQX3Bw9iE23VKXCr8iBLYBuw8JVJQ0IRi31kiEp6HOrUS7OVCKSUe6jFsahJpTwa3q9CHJobCchbjHr/Ko62+9zs4oYbR8ieR7KegGBo3hVQvh9OhfQmp5mjZ; Expires=Thu, 23 May 2024 02:06:23 GMT; Path=/; SameSite=None, cfid=b2d71bf7-1ada-42da-8e1b-b3222983a1a5;Path=/;Domain=100.24.151.19;Expires=Wed, 05-Jun-2024 03:44:28 UTC;HTTPOnly, cftoken=0;Path=/;Domain=100.24.151.19;Expires=Wed, 05-Jun-2024 03:44:28 UTC;HTTPOnly, JSESSIONID=5C6667A61C6731ADCC9411AD9C732E6A; Path=/; HttpOnly; Secure, careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:25 UTC;Secure;HTTPOnly
Cache-Control: private
Location: https://www.yourmembership.com/
X-AspNet-Version: 4.0.30319
X-UA-Compatible: IE=edge
X-Frame-Options: sameorigin, DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Content-Type: text/html; charset=UTF-8
Content-Length: 0

• https://www.yourmembership.com/ Inline-JavaScript (∑/total): 24/57569 Inline-CSS (∑/total): 10/53394	200	Html is minified: 183.71 % Other inline scripts (∑/total): 24/72534	2.576	B
Date: Thu, 16 May 2024 02:06:47 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, Cookie
X-Powered-By: WP Engine
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Link: <https://www.yourmembership.com/wp-json/>; rel="https://api.w.org/", <https://www.yourmembership.com/wp-json/wp/v2/pages/238189>; rel="alternate"; type="application/json", <https://www.yourmembership.com/>; rel=shortlink
Set-Cookie: ays_popup_cookie_1=Blog%20Subscribe; expires=Thu, 16 May 2024 01:55:32 GMT; Max-Age=0; path=/, __cf_bm=vQk6ev7w2duabS73nxXP6oY43WEppQ8n9v033VmESV4-1715825207-1.0.1.1-zHXfoTtHSw6PLLfnzso729w03Vo0oCN3e.DBcsEItVy_iiCP0C18tbRjdzBq4M2jxVA5Od8Sb4A.jrn0Pkik5g; path=/; expires=Thu, 16-May-24 02:36:47 GMT; domain=.www.yourmembership.com; HttpOnly; Secure; SameSite=None
X-Cacheable: SHORT
Cache-Control: must-revalidate, max-age=600
X-Cache: HIT: 19
X-Cache-Group: normal
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8847cf761b531afc-AMS
Alt-Svc: h3=":443"
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip

7. Comments

	1. General Results, most used to calculate the result
A	name "careers.nbda.com" is subdomain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 94244 (complete: 244198)
A	Good: All ip addresses are public addresses
A	Good: No asked Authoritative Name Server had a timeout
A	DNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: non-www is preferred
A	Good: every https has a Strict Transport Security Header
A	Good: HSTS max-age is long enough, 31536000 seconds = 365 days
A	Good: HSTS has includeSubdomains - directive
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):4 complete Content-Type - header (7 urls)
	http://careers.nbda.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 3.217.168.14			Url with incomplete Content-Type - header - missing charset
	http://careers.nbda.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 3.217.202.200			Url with incomplete Content-Type - header - missing charset
	http://careers.nbda.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 100.24.151.19			Url with incomplete Content-Type - header - missing charset
	http://careers.nbda.com/home/index.cfm?	301	datadome=3mdrm_3O7UnYvrq~Ur8Eo3OiVWfi5YFITTMSl4v~CdUezUYytc_Hs4a9w~PUuXgr7LfJb6cA3VAmX6ISzhUx6GvvYXfTFS2OGusSo~rnJMpKw1OQYNKKL~bMjqxYSzvs; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/home/index.cfm?	301	AWSALB=1XQ8BjPzOXuT3StjJAh62U/f9JtVM7h2vKT0veJQnHK8ewValMQ75oSK2penivhNDmx+nlM80TS/A8oOFj3brJpmgbdsfgNDzdgw6wb1wJsnxBSLg43TFaDIC0le; Expires=Thu, 23 May 2024 02:06:44 GMT; Path=/	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/home/index.cfm?	301	AWSALBCORS=1XQ8BjPzOXuT3StjJAh62U/f9JtVM7h2vKT0veJQnHK8ewValMQ75oSK2penivhNDmx+nlM80TS/A8oOFj3brJpmgbdsfgNDzdgw6wb1wJsnxBSLg43TFaDIC0le; Expires=Thu, 23 May 2024 02:06:44 GMT; Path=/; SameSite=None	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/home/index.cfm?	301	cfid=76f83f6a-209c-4d16-853f-6178f6b41ae1;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:49 UTC;HTTPOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/home/index.cfm?	301	cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:49 UTC;HTTPOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/home/index.cfm?	301	JSESSIONID=5F031BBC97D4DD4EDC02D0EA149BA49F; Path=/; HttpOnly; Secure	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/home/index.cfm?	301	careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:46 UTC;Secure;HTTPOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 3.217.168.14	301	datadome=~J1uq_7WMML1W9gDoM78zMoQRk4Nxo002wpVdRIBBFxTPWGq3sr~5x5HTLKmZf_DO50V5XucJz8a7rvfdrbPNfkQ3I1UxrmHEZeGPJcp7XuGizJ0dyVYYU01dwgV9Jq2; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 3.217.168.14	301	AWSALB=cMjrxqcVDfK3++2T10+niUiHgHw9NJXy7os7p74/axIQkOn4TxJyNWx0D32YyF3xLfF7irwNyNMPa8mFWJc2yYhGUlUb6+DFWj+5S6JNWNcJqu6txrByd9VyRxmU; Expires=Thu, 23 May 2024 02:05:50 GMT; Path=/	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 3.217.168.14	301	AWSALBCORS=cMjrxqcVDfK3++2T10+niUiHgHw9NJXy7os7p74/axIQkOn4TxJyNWx0D32YyF3xLfF7irwNyNMPa8mFWJc2yYhGUlUb6+DFWj+5S6JNWNcJqu6txrByd9VyRxmU; Expires=Thu, 23 May 2024 02:05:50 GMT; Path=/; SameSite=None	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 3.217.168.14	301	cfid=476145c7-9794-498e-a566-3bc03c17e3ba;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:55 UTC;HTTPOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 3.217.168.14	301	cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:55 UTC;HTTPOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 3.217.168.14	301	JSESSIONID=4F42D3B987E3CD6ADE9C435655A2AD04; Path=/; HttpOnly; Secure	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 3.217.168.14	301	careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:15:51 UTC;Secure;HTTPOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 3.217.202.200	307	datadome=3cihilwmvu1ylPoD9Jq9zoBU9by3HkJnFUee~_xUdMzfosmsenOJAwqMSR0bwSfIvkxBa1CCD9kCfyxgrfoqi6sztCyRshOFIH538miUYbLojTqEZws1ffqym05_f3uu; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 3.217.202.200	307	AWSALB=0uZAz9sALlS5Lzgx1jhHe0GhCeR35CXdNQCv2h4kR6/CreAAtVpgxkiR6hPCyn2fa2KNy4VrLprwjIAf7wa9nx8Y9PqT/o08d0Z2zd3fheb3LOped+qgkuFRVSZ/; Expires=Thu, 23 May 2024 02:05:51 GMT; Path=/	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 3.217.202.200	307	AWSALBCORS=0uZAz9sALlS5Lzgx1jhHe0GhCeR35CXdNQCv2h4kR6/CreAAtVpgxkiR6hPCyn2fa2KNy4VrLprwjIAf7wa9nx8Y9PqT/o08d0Z2zd3fheb3LOped+qgkuFRVSZ/; Expires=Thu, 23 May 2024 02:05:51 GMT; Path=/; SameSite=None	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 100.24.151.19	307	datadome=DND2SYxlO8GNPDaTvrS~GHRMh6o8gR~fworjlJHZib~WRnjg8EZ7l26~w1lWjwPShVOAVxMrxLntWKoMA8jUC1KBCx5u32rFNlzE394d_GxIHUcj2O7d~yHmhzZ5UWsO; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 100.24.151.19	307	AWSALB=1x4aTcu0MixbtiaGSYBqUC1R7/qIJ0vfrB/4tsyt95nH6BTekMOdYT+PJbgTg5oKjeyA5wjZaOyW3mcVuIN0JM3Y1KpqRDJ/gfogyiMbkDLe2mND/4mZt/LPjh3X; Expires=Thu, 23 May 2024 02:05:48 GMT; Path=/	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/ 100.24.151.19	307	AWSALBCORS=1x4aTcu0MixbtiaGSYBqUC1R7/qIJ0vfrB/4tsyt95nH6BTekMOdYT+PJbgTg5oKjeyA5wjZaOyW3mcVuIN0JM3Y1KpqRDJ/gfogyiMbkDLe2mND/4mZt/LPjh3X; Expires=Thu, 23 May 2024 02:05:48 GMT; Path=/; SameSite=None	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 3.217.168.14	404	datadome=jVs2hfuCi~FsGGlwW0hu5BMaW7bJ3v9I8M56vTAsbgvtdUpluVH3yec0h~~g5c7n0ymnftZdWyW46VvBn~WnBL2jc7Cr5spjO7NnhLzENe8yPilrf_DYmlX0mg7n75Jc; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 3.217.202.200	404	datadome=3~p6CNvyYGt9WFP4bKetVZagl7PLyxU5z13~bXq_2jNYEh6uCl8sGTeh1JPSpyNhQNX0iJGpPsq6bLT0Fbss3~pntHf8xLJnasiKQMmJoifl0ZGodxX~YegZI1JYVXwA; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://careers.nbda.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 100.24.151.19	404	datadome=aY8UNBVgLe~vddnIiN3EhXEwr5cXTNP3yufOGB92QxS6HE1zIkT4qHu0jWdcmNZrad6HkMjmyb7ZxWGx6WrUiuVjew_k0UoODoN0Dnks5EFVpWLNSf94T~OVwQYKI4ww; Max-Age=31536000; Domain=.nbda.com; Path=/; Secure; SameSite=Lax	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
B	https://careers.nbda.com/ 3.217.168.14	200	AWSALB=77pepk7bK6FWC9PhvrnHyUq9Ur3iyNL1crnJBQYoTPmsBNt8eWXKmqs6/xGkqdANcHYNfKwtvCdc354T8cIXP1lO7gjIUZ+bCrGPPuslHqbkuNCIsRQqUpo6VwVq; Expires=Thu, 23 May 2024 02:06:03 GMT; Path=/	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 3.217.168.14	200	AWSALBCORS=77pepk7bK6FWC9PhvrnHyUq9Ur3iyNL1crnJBQYoTPmsBNt8eWXKmqs6/xGkqdANcHYNfKwtvCdc354T8cIXP1lO7gjIUZ+bCrGPPuslHqbkuNCIsRQqUpo6VwVq; Expires=Thu, 23 May 2024 02:06:03 GMT; Path=/; SameSite=None	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 3.217.168.14	200	cfid=9e58bcd7-30fb-4047-b2fd-36e5eacc94c3;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:08 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 3.217.168.14	200	cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:08 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 3.217.202.200	200	AWSALB=DND8ureZFCC8GVuJfWunU+ayvzIOlIedL7kCsqNCQwbMXcyY86Q4PQbMT0c/pw6yzMXaYxTaNAFvxqh4Y18AeiPO2jf+EZAI/ludqe7bmwqyBXxN5zG2GiZRvmNp; Expires=Thu, 23 May 2024 02:06:13 GMT; Path=/	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 3.217.202.200	200	AWSALBCORS=DND8ureZFCC8GVuJfWunU+ayvzIOlIedL7kCsqNCQwbMXcyY86Q4PQbMT0c/pw6yzMXaYxTaNAFvxqh4Y18AeiPO2jf+EZAI/ludqe7bmwqyBXxN5zG2GiZRvmNp; Expires=Thu, 23 May 2024 02:06:13 GMT; Path=/; SameSite=None	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 3.217.202.200	200	cfid=bc4c44a9-5edf-4ac3-acd0-75464e8cf59d;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:18 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 3.217.202.200	200	cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:18 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 100.24.151.19	200	AWSALB=mmDmpnQ9rBv+lvMF7eA734l8+uznJ/c/qQaEs9oR9C0pf1NmMuKBA3RE1T2AxynB5217lH3JWe/NG9q2TIJQX6wwNEu0EicRRdaepJbU5Xo32t4Dq6itHoOP7tyj; Expires=Thu, 23 May 2024 02:05:53 GMT; Path=/	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 100.24.151.19	200	AWSALBCORS=mmDmpnQ9rBv+lvMF7eA734l8+uznJ/c/qQaEs9oR9C0pf1NmMuKBA3RE1T2AxynB5217lH3JWe/NG9q2TIJQX6wwNEu0EicRRdaepJbU5Xo32t4Dq6itHoOP7tyj; Expires=Thu, 23 May 2024 02:05:53 GMT; Path=/; SameSite=None	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 100.24.151.19	200	cfid=0c55a7d0-bc69-4ee7-81bd-89b31cdcb697;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:58 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://careers.nbda.com/ 100.24.151.19	200	cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:58 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://3.217.168.14/ 3.217.168.14	301	AWSALB=T3QjTdLpcrAzX12trMevf96Tsfoe7pBZFOvJYWk+5HV4j4Z7HFyvH4dth7geKMlfKZyNvshZ836N2cLr8t/YtwlgoxvMDmfTarKl5IWzA//EJiv6xbSTEKKDDKVk; Expires=Thu, 23 May 2024 02:06:30 GMT; Path=/	Cookie sent via https, but not marked as secure
B	https://3.217.168.14/ 3.217.168.14	301	AWSALBCORS=T3QjTdLpcrAzX12trMevf96Tsfoe7pBZFOvJYWk+5HV4j4Z7HFyvH4dth7geKMlfKZyNvshZ836N2cLr8t/YtwlgoxvMDmfTarKl5IWzA//EJiv6xbSTEKKDDKVk; Expires=Thu, 23 May 2024 02:06:30 GMT; Path=/; SameSite=None	Cookie sent via https, but not marked as secure
B	https://3.217.168.14/ 3.217.168.14	301	cfid=dffb6f70-4663-4ea0-928a-aa357f36ffae;Path=/;Domain=3.217.168.14;Expires=Wed, 05-Jun-2024 03:44:36 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://3.217.168.14/ 3.217.168.14	301	cftoken=0;Path=/;Domain=3.217.168.14;Expires=Wed, 05-Jun-2024 03:44:36 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://3.217.202.200/ 3.217.202.200	301	AWSALB=SBz5U5NszBektFs7fSzpk5zWsadRbXO+RZyt/bhme9zY38ccupxfEGHTYiLPbQ2WhcnMFxTAasTDs8gVDIvfkwx1hoMu6CMor98r2MKJG0GKaUNzudWkVK5xZXyi; Expires=Thu, 23 May 2024 02:06:37 GMT; Path=/	Cookie sent via https, but not marked as secure
B	https://3.217.202.200/ 3.217.202.200	301	AWSALBCORS=SBz5U5NszBektFs7fSzpk5zWsadRbXO+RZyt/bhme9zY38ccupxfEGHTYiLPbQ2WhcnMFxTAasTDs8gVDIvfkwx1hoMu6CMor98r2MKJG0GKaUNzudWkVK5xZXyi; Expires=Thu, 23 May 2024 02:06:37 GMT; Path=/; SameSite=None	Cookie sent via https, but not marked as secure
B	https://3.217.202.200/ 3.217.202.200	301	cfid=ece66273-f569-46e6-844e-4ec309772d76;Path=/;Domain=3.217.202.200;Expires=Wed, 05-Jun-2024 03:44:42 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://3.217.202.200/ 3.217.202.200	301	cftoken=0;Path=/;Domain=3.217.202.200;Expires=Wed, 05-Jun-2024 03:44:42 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://100.24.151.19/ 100.24.151.19	301	AWSALB=vg5JQX3Bw9iE23VKXCr8iBLYBuw8JVJQ0IRi31kiEp6HOrUS7OVCKSUe6jFsahJpTwa3q9CHJobCchbjHr/Ko62+9zs4oYbR8ieR7KegGBo3hVQvh9OhfQmp5mjZ; Expires=Thu, 23 May 2024 02:06:23 GMT; Path=/	Cookie sent via https, but not marked as secure
B	https://100.24.151.19/ 100.24.151.19	301	AWSALBCORS=vg5JQX3Bw9iE23VKXCr8iBLYBuw8JVJQ0IRi31kiEp6HOrUS7OVCKSUe6jFsahJpTwa3q9CHJobCchbjHr/Ko62+9zs4oYbR8ieR7KegGBo3hVQvh9OhfQmp5mjZ; Expires=Thu, 23 May 2024 02:06:23 GMT; Path=/; SameSite=None	Cookie sent via https, but not marked as secure
B	https://100.24.151.19/ 100.24.151.19	301	cfid=b2d71bf7-1ada-42da-8e1b-b3222983a1a5;Path=/;Domain=100.24.151.19;Expires=Wed, 05-Jun-2024 03:44:28 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://100.24.151.19/ 100.24.151.19	301	cftoken=0;Path=/;Domain=100.24.151.19;Expires=Wed, 05-Jun-2024 03:44:28 UTC;HTTPOnly	Cookie sent via https, but not marked as secure
B	https://www.yourmembership.com/	200	ays_popup_cookie_1=Blog%20Subscribe; expires=Thu, 16 May 2024 01:55:32 GMT; Max-Age=0; path=/	Cookie sent via https, but not marked as secure
B	http://careers.nbda.com/home/index.cfm?	301	AWSALB=1XQ8BjPzOXuT3StjJAh62U/f9JtVM7h2vKT0veJQnHK8ewValMQ75oSK2penivhNDmx+nlM80TS/A8oOFj3brJpmgbdsfgNDzdgw6wb1wJsnxBSLg43TFaDIC0le; Expires=Thu, 23 May 2024 02:06:44 GMT; Path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/home/index.cfm?	301	cfid=76f83f6a-209c-4d16-853f-6178f6b41ae1;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:49 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/home/index.cfm?	301	cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:49 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/home/index.cfm?	301	JSESSIONID=5F031BBC97D4DD4EDC02D0EA149BA49F; Path=/; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/home/index.cfm?	301	careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:46 UTC;Secure;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/ 3.217.168.14	301	AWSALB=cMjrxqcVDfK3++2T10+niUiHgHw9NJXy7os7p74/axIQkOn4TxJyNWx0D32YyF3xLfF7irwNyNMPa8mFWJc2yYhGUlUb6+DFWj+5S6JNWNcJqu6txrByd9VyRxmU; Expires=Thu, 23 May 2024 02:05:50 GMT; Path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/ 3.217.168.14	301	cfid=476145c7-9794-498e-a566-3bc03c17e3ba;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:55 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/ 3.217.168.14	301	cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:55 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/ 3.217.168.14	301	JSESSIONID=4F42D3B987E3CD6ADE9C435655A2AD04; Path=/; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/ 3.217.168.14	301	careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:15:51 UTC;Secure;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/ 3.217.202.200	307	AWSALB=0uZAz9sALlS5Lzgx1jhHe0GhCeR35CXdNQCv2h4kR6/CreAAtVpgxkiR6hPCyn2fa2KNy4VrLprwjIAf7wa9nx8Y9PqT/o08d0Z2zd3fheb3LOped+qgkuFRVSZ/; Expires=Thu, 23 May 2024 02:05:51 GMT; Path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://careers.nbda.com/ 100.24.151.19	307	AWSALB=1x4aTcu0MixbtiaGSYBqUC1R7/qIJ0vfrB/4tsyt95nH6BTekMOdYT+PJbgTg5oKjeyA5wjZaOyW3mcVuIN0JM3Y1KpqRDJ/gfogyiMbkDLe2mND/4mZt/LPjh3X; Expires=Thu, 23 May 2024 02:05:48 GMT; Path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.168.14	200	AWSALB=77pepk7bK6FWC9PhvrnHyUq9Ur3iyNL1crnJBQYoTPmsBNt8eWXKmqs6/xGkqdANcHYNfKwtvCdc354T8cIXP1lO7gjIUZ+bCrGPPuslHqbkuNCIsRQqUpo6VwVq; Expires=Thu, 23 May 2024 02:06:03 GMT; Path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.168.14	200	cfid=9e58bcd7-30fb-4047-b2fd-36e5eacc94c3;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:08 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.168.14	200	cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:08 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.168.14	200	JSESSIONID=B61362D6E735F0D23103F017E847112C; Path=/; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.168.14	200	careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:05 UTC;Secure;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.168.14	200	COOKIECONSENT=false;Path=/;Expires=Mon, 15-May-2034 03:59:59 UTC;Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.202.200	200	AWSALB=DND8ureZFCC8GVuJfWunU+ayvzIOlIedL7kCsqNCQwbMXcyY86Q4PQbMT0c/pw6yzMXaYxTaNAFvxqh4Y18AeiPO2jf+EZAI/ludqe7bmwqyBXxN5zG2GiZRvmNp; Expires=Thu, 23 May 2024 02:06:13 GMT; Path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.202.200	200	cfid=bc4c44a9-5edf-4ac3-acd0-75464e8cf59d;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:18 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.202.200	200	cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:44:18 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.202.200	200	JSESSIONID=CA50E9902371F960816BCFE0534C3C88; Path=/; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.202.200	200	careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:14 UTC;Secure;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 3.217.202.200	200	COOKIECONSENT=false;Path=/;Expires=Mon, 15-May-2034 04:00:00 UTC;Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 100.24.151.19	200	AWSALB=mmDmpnQ9rBv+lvMF7eA734l8+uznJ/c/qQaEs9oR9C0pf1NmMuKBA3RE1T2AxynB5217lH3JWe/NG9q2TIJQX6wwNEu0EicRRdaepJbU5Xo32t4Dq6itHoOP7tyj; Expires=Thu, 23 May 2024 02:05:53 GMT; Path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 100.24.151.19	200	cfid=0c55a7d0-bc69-4ee7-81bd-89b31cdcb697;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:58 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 100.24.151.19	200	cftoken=0;Path=/;Domain=.nbda.com;Expires=Wed, 05-Jun-2024 03:43:58 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 100.24.151.19	200	JSESSIONID=474B4C4869C9F60A6FF061F3199F724D; Path=/; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 100.24.151.19	200	careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:15:54 UTC;Secure;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://careers.nbda.com/ 100.24.151.19	200	COOKIECONSENT=false;Path=/;Expires=Mon, 15-May-2034 03:59:59 UTC;Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://3.217.168.14/ 3.217.168.14	301	AWSALB=T3QjTdLpcrAzX12trMevf96Tsfoe7pBZFOvJYWk+5HV4j4Z7HFyvH4dth7geKMlfKZyNvshZ836N2cLr8t/YtwlgoxvMDmfTarKl5IWzA//EJiv6xbSTEKKDDKVk; Expires=Thu, 23 May 2024 02:06:30 GMT; Path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://3.217.168.14/ 3.217.168.14	301	cfid=dffb6f70-4663-4ea0-928a-aa357f36ffae;Path=/;Domain=3.217.168.14;Expires=Wed, 05-Jun-2024 03:44:36 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://3.217.168.14/ 3.217.168.14	301	cftoken=0;Path=/;Domain=3.217.168.14;Expires=Wed, 05-Jun-2024 03:44:36 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://3.217.168.14/ 3.217.168.14	301	JSESSIONID=66815B38537C41A67A57B99205DFF24B; Path=/; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://3.217.168.14/ 3.217.168.14	301	careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:32 UTC;Secure;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://3.217.202.200/ 3.217.202.200	301	AWSALB=SBz5U5NszBektFs7fSzpk5zWsadRbXO+RZyt/bhme9zY38ccupxfEGHTYiLPbQ2WhcnMFxTAasTDs8gVDIvfkwx1hoMu6CMor98r2MKJG0GKaUNzudWkVK5xZXyi; Expires=Thu, 23 May 2024 02:06:37 GMT; Path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://3.217.202.200/ 3.217.202.200	301	cfid=ece66273-f569-46e6-844e-4ec309772d76;Path=/;Domain=3.217.202.200;Expires=Wed, 05-Jun-2024 03:44:42 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://3.217.202.200/ 3.217.202.200	301	cftoken=0;Path=/;Domain=3.217.202.200;Expires=Wed, 05-Jun-2024 03:44:42 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://3.217.202.200/ 3.217.202.200	301	JSESSIONID=75DD805621EC5CA69DCB8E3EDCF82B66; Path=/; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://3.217.202.200/ 3.217.202.200	301	careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:39 UTC;Secure;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://100.24.151.19/ 100.24.151.19	301	AWSALB=vg5JQX3Bw9iE23VKXCr8iBLYBuw8JVJQ0IRi31kiEp6HOrUS7OVCKSUe6jFsahJpTwa3q9CHJobCchbjHr/Ko62+9zs4oYbR8ieR7KegGBo3hVQvh9OhfQmp5mjZ; Expires=Thu, 23 May 2024 02:06:23 GMT; Path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://100.24.151.19/ 100.24.151.19	301	cfid=b2d71bf7-1ada-42da-8e1b-b3222983a1a5;Path=/;Domain=100.24.151.19;Expires=Wed, 05-Jun-2024 03:44:28 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://100.24.151.19/ 100.24.151.19	301	cftoken=0;Path=/;Domain=100.24.151.19;Expires=Wed, 05-Jun-2024 03:44:28 UTC;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://100.24.151.19/ 100.24.151.19	301	JSESSIONID=5C6667A61C6731ADCC9411AD9C732E6A; Path=/; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://100.24.151.19/ 100.24.151.19	301	careers_i_v=true;Path=/;Expires=Thu, 16-May-2024 02:16:25 UTC;Secure;HTTPOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.yourmembership.com/	200	ays_popup_cookie_1=Blog%20Subscribe; expires=Thu, 16 May 2024 01:55:32 GMT; Max-Age=0; path=/	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
I	https://careers.nbda.com/ 100.24.151.19	200		Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
I	https://careers.nbda.com/ 3.217.168.14	200		Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
I	https://careers.nbda.com/ 3.217.202.200	200		Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
K	http://careers.nbda.com/ 100.24.151.19, Status 307		http://careers.nbda.com/ 3.217.168.14, Status 301	Configuration problem - different ip addresses with different status
K	http://careers.nbda.com/ 3.217.168.14, Status 301		http://careers.nbda.com/ 3.217.202.200, Status 307	Configuration problem - different ip addresses with different status
N	https://3.217.168.14/ 3.217.168.14	301	https://www.yourmembership.com/	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://3.217.202.200/ 3.217.202.200	301	https://www.yourmembership.com/	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://100.24.151.19/ 100.24.151.19	301	https://www.yourmembership.com/	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.careers.nbda.com
	2. Header-Checks
A	careers.nbda.com 3.217.168.14	Content-Security-Policy		Ok: Header without syntax errors found: frame-ancestors 'self'
F				Bad: Missing default-src directive. A default-src directive is used if one of the specialized fetch directives (child-src, connect-src, font-src, frame-src, img-src, manifest-src, media-src, object-src, prefetch-src, script-src, style-src, worker-src) isn't defined. Missing default-src, all sources are allowed, that's bad. A default-src with 'none' or 'self' blocks that.
E				Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E				Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
F				Critical: No object-src and no default-src as fallback defined. So object / embed / applet can load every resource. That's fatal.
F				Critical: No script-src and no default-src as fallback defined. So scripts are unlimited. That's fatal.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
F		X-Frame-Options		Critical: Header with syntax errors found: sameorigin, DENY
B				Info: Header is deprecated. May not longer work in modern browsers. sameorigin, DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
E				Critical: Unknown Header-Element found sameorigin, DENY
E				Critical: Unknown Header-Element found sameorigin,
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
A	careers.nbda.com 3.217.202.200	Content-Security-Policy		Ok: Header without syntax errors found: frame-ancestors 'self'
F				Bad: Missing default-src directive. A default-src directive is used if one of the specialized fetch directives (child-src, connect-src, font-src, frame-src, img-src, manifest-src, media-src, object-src, prefetch-src, script-src, style-src, worker-src) isn't defined. Missing default-src, all sources are allowed, that's bad. A default-src with 'none' or 'self' blocks that.
E				Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E				Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
F				Critical: No object-src and no default-src as fallback defined. So object / embed / applet can load every resource. That's fatal.
F				Critical: No script-src and no default-src as fallback defined. So scripts are unlimited. That's fatal.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
F		X-Frame-Options		Critical: Header with syntax errors found: sameorigin, DENY
B				Info: Header is deprecated. May not longer work in modern browsers. sameorigin, DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
E				Critical: Unknown Header-Element found sameorigin, DENY
E				Critical: Unknown Header-Element found sameorigin,
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
A	careers.nbda.com 100.24.151.19	Content-Security-Policy		Ok: Header without syntax errors found: frame-ancestors 'self'
F				Bad: Missing default-src directive. A default-src directive is used if one of the specialized fetch directives (child-src, connect-src, font-src, frame-src, img-src, manifest-src, media-src, object-src, prefetch-src, script-src, style-src, worker-src) isn't defined. Missing default-src, all sources are allowed, that's bad. A default-src with 'none' or 'self' blocks that.
E				Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E				Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
F				Critical: No object-src and no default-src as fallback defined. So object / embed / applet can load every resource. That's fatal.
F				Critical: No script-src and no default-src as fallback defined. So scripts are unlimited. That's fatal.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
F		X-Frame-Options		Critical: Header with syntax errors found: sameorigin, DENY
B				Info: Header is deprecated. May not longer work in modern browsers. sameorigin, DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
E				Critical: Unknown Header-Element found sameorigin, DENY
E				Critical: Unknown Header-Element found sameorigin,
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
F	careers.nbda.com 3.217.168.14	Referrer-Policy		Critical: Missing Header:
F	careers.nbda.com 3.217.168.14	Permissions-Policy		Critical: Missing Header:
F	careers.nbda.com 3.217.202.200	Referrer-Policy		Critical: Missing Header:
F	careers.nbda.com 3.217.202.200	Permissions-Policy		Critical: Missing Header:
F	careers.nbda.com 100.24.151.19	Referrer-Policy		Critical: Missing Header:
F	careers.nbda.com 100.24.151.19	Permissions-Policy		Critical: Missing Header:
	3. DNS- and NameServer - Checks
A	Info:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
A	Info:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
	Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 2 different Name Servers found: ns5.worldnic.com, ns6.worldnic.com, 2 Name Servers included in Delegation: ns5.worldnic.com, ns6.worldnic.com, 2 Name Servers included in 1 Zone definitions: ns5.worldnic.com, ns6.worldnic.com, 1 Name Servers listed in SOA.Primary: ns5.worldnic.com.
A	Good: Only one SOA.Primary Name Server found.: ns5.worldnic.com.
A	Good: SOA.Primary Name Server included in the delegation set.: ns5.worldnic.com.
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Info: Ipv4-Subnet-list: 2 Name Servers, 1 different subnets (first Byte): 162., 1 different subnets (first two Bytes): 162.159., 2 different subnets (first three Bytes): 162.159.26., 162.159.27.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Good: Nameserver supports TCP connections: 2 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 2 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 2 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: ns5.worldnic.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
A	Good: All SOA have the same Serial Number
	Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.
	4. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
	https://careers.nbda.com/ 3.217.168.14	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
	https://careers.nbda.com/ 3.217.202.200	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
	https://careers.nbda.com/ 100.24.151.19	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
	https://www.yourmembership.com/	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
	https://careers.nbda.com/ 3.217.168.14	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://careers.nbda.com/ 3.217.202.200	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://careers.nbda.com/ 100.24.151.19	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://www.yourmembership.com/	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
A	Good: Some script Elements (type text/javascript) with a src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
	https://careers.nbda.com/ 3.217.168.14	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 5 script elements without defer/async.
	https://careers.nbda.com/ 3.217.202.200	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 5 script elements without defer/async.
	https://careers.nbda.com/ 100.24.151.19	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 5 script elements without defer/async.
	https://www.yourmembership.com/	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 9 script elements without defer/async.
	Warning: CSS / JavaScript found without Compression. Compress these ressources, gzip, deflate, br are checked. 3 external CSS / JavaScript files without GZip found - 63 with GZip, 66 complete
A	Good: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 6 images (type image/png, image/jpg) found without additional GZip. Not required because these images are already compressed
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 84 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 21 with Cache-Control max-age too short (minimum 7 days), 6 with Cache-Control long enough, 111 complete.
	Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 142 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 3 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 145 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Good: Some img-elements have a valid alt-attribute.: 109 img-elements found, 61 img-elements with correct alt-attributes (defined, not an empty value).
	Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 48 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
	http://careers.nbda.com/home/index.cfm?	301		Warning: HSTS header sent via http has no effect
	http://careers.nbda.com/ 3.217.168.14	301		Warning: HSTS header sent via http has no effect
	http://careers.nbda.com/ 3.217.202.200	307		Warning: HSTS header sent via http has no effect
	http://careers.nbda.com/ 100.24.151.19	307		Warning: HSTS header sent via http has no effect
A	Info: Different Server-Headers found
A	Duration: 769613 milliseconds, 769.613 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

careers.nbda.com

3.217.168.14

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

careers.nbda.com

3.217.168.14

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=careers.nbda.com
	2	CN=R3, O=Let's Encrypt, C=US

careers.nbda.com

3.217.202.200

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

careers.nbda.com

3.217.202.200

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=careers.nbda.com
	2	CN=R3, O=Let's Encrypt, C=US

careers.nbda.com

100.24.151.19

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

careers.nbda.com

100.24.151.19

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=careers.nbda.com
	2	CN=R3, O=Let's Encrypt, C=US

3.217.168.14

443

name does not match

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

3.217.168.14

443

name does not match

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.careerwebsite.com, O="Community Brands HoldCo, LLC", L=St. Petersburg, C=US, ST=Florida
	2	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

3.217.202.200

443

name does not match

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

3.217.202.200

443

name does not match

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.careerwebsite.com, O="Community Brands HoldCo, LLC", L=St. Petersburg, C=US, ST=Florida
	2	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

100.24.151.19

443

name does not match

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

100.24.151.19

443

name does not match

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.careerwebsite.com, O="Community Brands HoldCo, LLC", L=St. Petersburg, C=US, ST=Florida
	2	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

www.yourmembership.com

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

www.yourmembership.com

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - too much certificates, don't send root certificates	1	CN=www.yourmembership.com
	2	CN=E1, O=Let's Encrypt, C=US
	3	CN=ISRG Root X2, O=Internet Security Research Group, C=US
	4	CN=ISRG Root X1, O=Internet Security Research Group, C=US

9. Certificates

CN=careers.nbda.com

08.05.2024

06.08.2024
288 days expired

careers.nbda.com - 1 entry

CN=careers.nbda.com

08.05.2024

06.08.2024
288 days expired

careers.nbda.com - 1 entry

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	04B5649BE3E82288D4622B05849221E4AA64
Thumbprint:	F40A8357788126437B41353E2F4C5B802CFFA9AE
SHA256 / Certificate:	rKAeJNIdS6vXcewsXJ2k3k7Kb4Br76OK13yumWc3huE=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	f6f784313a023aab0b214d894a36367b9f856a7fc6b3ebec6f5448efbdef4b30
SHA256 hex / Subject Public Key Information (SPKI):	f6f784313a023aab0b214d894a36367b9f856a7fc6b3ebec6f5448efbdef4b30 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://r3.o.lencr.org
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=R3, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 117 days

CN=R3, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 117 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:	A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:	Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):	8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3666 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3666 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=*.careerwebsite.com, O="Community Brands HoldCo, LLC", L=St. Petersburg, S=Florida, C=US

31.10.2023

01.12.2024
171 days expired

*.careerwebsite.com, careerwebsite.com - 2 entries

CN=*.careerwebsite.com, O="Community Brands HoldCo, LLC", L=St. Petersburg, S=Florida, C=US

31.10.2023

01.12.2024
171 days expired

*.careerwebsite.com, careerwebsite.com - 2 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	09C52499C4900A3C3017C6826E59EBE3
Thumbprint:	5E2D328AAD8D6E550E6E4E5F194A403AE7E648A0
SHA256 / Certificate:	D5CRcYucSYR569cEgiH5jYdi6wvAWQWNyZtyTbvXpSk=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	859aa25d9f2e7b42649f1713081e947a3f4f467ae0af65389e41c6cb59d01ca8
SHA256 hex / Subject Public Key Information (SPKI):	859aa25d9f2e7b42649f1713081e947a3f4f467ae0af65389e41c6cb59d01ca8 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

14.04.2021

14.04.2031
expires in 2154 days

CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

14.04.2021

14.04.2031
expires in 2154 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	06D8D904D5584346F68A2FA754227EC4
Thumbprint:	1C58A3A8518E8759BF075B76B750D4F2DF264FCD
SHA256 / Certificate:	UidMV85N7jtJ23p/9wjAQPdxiYs76IclqG+0QwGC/hQ=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	450799901e36ce751fb0320815621189811c2a5ee71f0345c160ab9cc3096d57
SHA256 hex / Subject Public Key Information (SPKI):	450799901e36ce751fb0320815621189811c2a5ee71f0345c160ab9cc3096d57
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

10.11.2006

10.11.2031
expires in 2364 days

CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

10.11.2006

10.11.2031
expires in 2364 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	083BE056904246B1A1756AC95991C74A
Thumbprint:	A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
SHA256 / Certificate:	Q0ig6URMeMsmXgWNXolEtNhPlmK9Jtslf4k0pEPHAWE=
SHA256 hex / Cert (DANE * 0 1):	4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
SHA256 hex / PublicKey (DANE * 1 1):	aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SHA256 hex / Subject Public Key Information (SPKI):	aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=www.yourmembership.com

29.03.2024

27.06.2024
328 days expired

www.yourmembership.com - 1 entry

CN=www.yourmembership.com

29.03.2024

27.06.2024
328 days expired

www.yourmembership.com - 1 entry

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	03C4E1E65F88CDBE804E28390482EDE0A060
Thumbprint:	24A0EFCA60289216AB1B6779A62C636F76A660D5
SHA256 / Certificate:	f9w0z/EiAe1tXS2Wbr37KtOGseFqwbJO6Xk1Xgw1JcU=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	d7341fc1b6ca6194ee3516a64e901235d64fbaf72ff20141b5772ff448018275
SHA256 hex / Subject Public Key Information (SPKI):	d7341fc1b6ca6194ee3516a64e901235d64fbaf72ff20141b5772ff448018275 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://e1.o.lencr.org
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=www.yourmembership.com

29.03.2024

27.06.2024
328 days expired

www.yourmembership.com - 1 entry

CN=www.yourmembership.com

29.03.2024

27.06.2024
328 days expired

www.yourmembership.com - 1 entry

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	03C4E1E65F88CDBE804E28390482EDE0A060
Thumbprint:	24A0EFCA60289216AB1B6779A62C636F76A660D5
SHA256 / Certificate:	f9w0z/EiAe1tXS2Wbr37KtOGseFqwbJO6Xk1Xgw1JcU=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	d7341fc1b6ca6194ee3516a64e901235d64fbaf72ff20141b5772ff448018275
SHA256 hex / Subject Public Key Information (SPKI):	d7341fc1b6ca6194ee3516a64e901235d64fbaf72ff20141b5772ff448018275 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://e1.o.lencr.org
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=E1, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 117 days

CN=E1, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 117 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	00B3BDDFF8A7845BBCE903A04135B34A45
Thumbprint:	091E8EA1B256A312962AF6C140C0FBF079A407B3
SHA256 / Certificate:	RklOMDeQWd8YvlISQwXmBvxZBw5bIQds4ROVS2BRfNo=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	276fe8a8c4ec7611565bf9fce6dcace9be320c1b5bea27596b2204071ed04f10
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=E1, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 117 days

CN=E1, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 117 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	00B3BDDFF8A7845BBCE903A04135B34A45
Thumbprint:	091E8EA1B256A312962AF6C140C0FBF079A407B3
SHA256 / Certificate:	RklOMDeQWd8YvlISQwXmBvxZBw5bIQds4ROVS2BRfNo=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	276fe8a8c4ec7611565bf9fce6dcace9be320c1b5bea27596b2204071ed04f10
SHA256 hex / Subject Public Key Information (SPKI):	276fe8a8c4ec7611565bf9fce6dcace9be320c1b5bea27596b2204071ed04f10
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X2, O=Internet Security Research Group, C=US

04.09.2020

17.09.2040
expires in 5598 days

CN=ISRG Root X2, O=Internet Security Research Group, C=US

04.09.2020

17.09.2040
expires in 5598 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:	BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:	aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=ISRG Root X2, O=Internet Security Research Group, C=US

04.09.2020

15.09.2025
expires in 117 days

CN=ISRG Root X2, O=Internet Security Research Group, C=US

04.09.2020

15.09.2025
expires in 117 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	079E492886376FD40848C23FC631E463
Thumbprint:	151682F5218C0A511C28F4060A73B9CA78CE9A53
SHA256 / Certificate:	iwW2jMZZ5e0PyzjyyUL7/SAOby/5+F1jxplO9eCwJwE=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):	762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3666 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3666 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=R3, O=Let's Encrypt, C=US				0	0	2

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
7274687526 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-05-07 23:06:23	2024-08-05 23:06:22	careers.nbda.com - 1 entries
6878413792 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-03-05 23:07:26	2024-06-03 23:07:25	careers.nbda.com - 1 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuer				last 7 days	active	num Certs
CN=R3, O=Let's Encrypt, C=US				0 /0 new	0	3

CRT-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
12985378950 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-05-07 21:06:23	2024-08-05 21:06:22	careers.nbda.com 1 entries
12287047297 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-03-05 22:07:26	2024-06-03 21:07:25	careers.nbda.com 1 entries
11630373590 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-01-02 22:10:35	2024-04-01 21:10:34	careers.nbda.com 1 entries

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://careers.nbda.com/ 3.217.168.14	a		67		0			0	0	0
	form		1		0	1	0	0	0	0
	iframe		1		0			0	0	0
	img		13	246,487 Bytes	0	1	12	0	0	0
	link	stylesheet	7	46,770 Bytes	0	2	5	5	0	0	-5
	link	other	1	1,522 Bytes	0	1	0	0	0	0
	meta	og	5	23,322 Bytes	0	1	1	0	0	0
	meta	twitter	2		0			0	0	0
	meta	other	4		0			0	0	0
	script		15	99,919 Bytes	0	1	14	13	0	2	-11
	style		6	46,645 Bytes	1	5	1	0	0	0
https://careers.nbda.com/ 3.217.202.200	a		67		0			0	0	0
	form		1		0	1	0	0	0	0
	iframe		1		0			0	0	0
	img		13	248,788 Bytes	0	1	12	0	0	0
	link	stylesheet	7	46,770 Bytes	0	2	5	5	0	0	-5
	link	other	1	1,522 Bytes	0	1	0	0	0	0
	meta	twitter	2		0			0	0	0
	meta	og	5	23,322 Bytes	0	1	1	0	0	0
	meta	other	4		0			0	0	0
	script		15	99,919 Bytes	0	1	14	13	0	2	-11
	style		6	46,645 Bytes	1	5	1	0	0	0
https://careers.nbda.com/ 100.24.151.19	a		67		0			0	0	0
	form		1		0	1	0	0	0	0
	iframe		1		0			0	0	0
	img		13	246,487 Bytes	0	1	12	0	0	0
	link	stylesheet	7	46,770 Bytes	0	2	5	5	0	0	-5
	link	other	1	1,522 Bytes	0	1	0	0	0	0
	meta	og	5	23,322 Bytes	0	1	1	0	0	0
	meta	twitter	2		0			0	0	0
	meta	other	4		0			0	0	0
	script		15	99,919 Bytes	0	1	14	13	0	2	-11
	style		6	46,645 Bytes	1	5	1	0	0	0
https://www.yourmembership.com/	a		103		0			0	0	0
	form		1		0			0	0	0
	iframe		1		0			0	0	0
	img		70		0			0	0	0
	link	alternate	5		0			0	0	0
	link	dns-prefetch	3		0			0	0	0
	link	stylesheet	35		0			0	0	0
	link	other	7		0			0	0	0
	meta	og	10		0			0	0	0
	meta	twitter	4		0			0	0	0
	meta	other	11		0			0	0	0
	script		10		0			0	0	0
	style		90		0			0	0	0
	video		1		0			0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname

Html-Element

name/equiv/ property/rel

href/src/content

HttpStatus

msg

∑

Status

3.217.168.14

/account/

/c/resumes/edit/upload.cfm?site_id=23874

/c/sitemap.cfm?site_id=23874

/c/terms/privacy.cfm?site_id=23874

/c/terms/tou.cfm?site_id=23874

/career-advice/

/career-advice/4-things-you-forgot-to-include-on-your-resume/117/

/career-advice/5-ways-to-adjust-your-body-language-to-come-across-as-more-confident-in-an-interview/119/

/career-advice/7-things-a-job-seeker-should-never-include-on-their-resume-our-resume-writers-weigh-in/118/

/career-advice/a-top-notch-resume-is-your-gateway-to-the-job-interview/116/

/career-advice/authors/carrie-maldonado/29/

/career-advice/authors/carson-kohler/38/

/career-advice/authors/jenna-mantis/27/

/career-advice/authors/natalia-autenrieth/37/

/career-advice/topics/interviewing/4/

/career-advice/topics/resumes-cover-letters/3/

/career-coaching/

/career-insights/

/directory/

/employer/candidates/

/employer/clients/

/employer/company/

/employer/help/

/employer/my-account/

/employer/my-jobs/

/employer/post/

/employer/pricing/

/employer/pricing/?extre=1

/employer/resumes/results/

/employer/templates/

/help/

/job/alerts/

/job/search/

/jobs/

/jobseeker/privacy/#cookies

/pricing/

/resumes/

http://careers.nbda.com/jobseeker/search/results/

https://careers.nbda.com/job/bicycle-assembly-technician/ba5122c0-30363824776/

https://careers.nbda.com/job/bicycle-retail-inventory-associate/ba5122c0-30360179850/

https://careers.nbda.com/job/bicycle-salesretail-indianapolis-in/ba5122c0-29281676873/

https://careers.nbda.com/job/bicycle-store-managerretail/ba5122c0-30262017975/

https://nbda.careerwebsite.com/career-advice/career-growth/

https://nbda.com

https://nbda.com/events/#!calendar

https://nbda.com/join-the-nbda/#join

https://twitter.com/NBDARetailers

https://www.facebook.com/NBDARetailers/

https://www.linkedin.com/company/national-bicycle-dealers-association

https://ymcareers.com?utm_source=in-app&utm_medium=referral&utm_campaign=job-boards-footer

mailto:clientserv@yourmembership.com?Subject=National Bicycle Dealers Association Inquiry

form

post

/jobs/

200

text/html; charset=UTF-8
X-Content-Type-Options nosniff found

411593 Bytes

iframe

src

https://www.googletagmanager.com/ns.html?id=GTM-MQ4769R

img

src

/headers/cc/responsive/img/logo-powered-by-cb.png

200

alt: YM Careers Logo

image/png
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

No Compression - 4521 Bytes

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/avatar_0db64b28f9.jpg

200

alt: Author Carrie Maldonado

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 8326 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/avatar_6b379f4f5b.jpg

200

alt: Author Natalia Autenrieth

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 21176 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/avatar_7a4899aa08.jpg

200

alt: Author Carson Kohler

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 35927 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/avatar_bde9ef28ae.jpg

200

alt: Author Jenna Mantis

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 35869 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/homepage_image_6bbeeed1c1.jpg

200

alt: 4 Things You Forgot to Include on Your Resume

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 21583 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/thumbnail_4dab94c7f8.jpg

200

alt: 5 Ways to Adjust your Body Language to Come Across as More Confident in an Interview

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 13479 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/thumbnail_6b269b98a8.jpg

200

alt: A Top Notch Resume is Your Gateway to the Job Interview

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 13335 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/thumbnail_eca74900bf.jpg

200

alt: 7 Things a Job Seeker Should Never Include on Their Resume - Our Resume Writers Weigh In

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 10267 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/headers/cc/responsive/partner_lib/23874/img/featured_services/Calendar.jpg

200

alt: Events

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 15122 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/headers/cc/responsive/partner_lib/23874/img/featured_services/Career Growth.jpg

200

alt: Career Growth

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 23406 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/headers/cc/responsive/partner_lib/23874/img/featured_services/MCBA_Join_Us.jpg

200

alt: Become a Member

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 20154 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/headers/cc/responsive/partner_lib/23874/img/logo-23874.png

200

alt: National Bicycle Dealers Association

image/png
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 23322 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

link

icon

/favicon.png?v=1

200

image/png
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

No Compression - 1522 Bytes

link

stylesheet

//use.fontawesome.com/e7f7322296.css

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=1800 - max-age too short.

Compression required: 367 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-osQqMap6hpKaoJZDlOBr9Q0U9nMw4nu6QVZgjuMDJRA=
sha384-9K2J4Z9DNauYKbMilB7zWL4zB+zpwUzk3BSVHI71llFh94DDt3aySCRBlRGuwbi8
sha512-tgoiqNk9T+5UYmFCKtudi3VuaA8QkNSGxDf5j05Kzh9QHHRMiEOZHRC0THAIth/8fB90FL1Y/RuYFX+VBGCzYQ==

Content loaded via url("...")

//use.fontawesome.com/releases/v4.7.0/css/font-awesome-css.min.css

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.eot

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.eot?#iefix

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.svg#fontawesomeregular

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.ttf

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.woff

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.woff2

link

stylesheet

/headers/cc/responsive/partner_lib/23874/custom.css?v=2

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

Compression required: 33433 Bytes

local SRI possible, possible hash-values:

sha256-LjWrX8V48G0qB07ctb4gzdj/id5TfqL8c0q06xOgWe0=
sha384-9zfbp9K4HxBuJYYGe2qIJmnVW1Wf1xPNT8eBO7mw8KgSRYxQnrNcvb4ZkK9dRakl
sha512-QtP3ST+bqzlha/b0/IXqdAn1M8gGyIIvMBV8Q6PwxVIyjT2izIE4mTwNtceuWfA03MSB43NvkXIozvLUXsapYA==

Content loaded via url("...")

img/hero-23874.jpg

link

stylesheet

/styles/bootstrap-icons-min.css

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

Compression required: 13337 Bytes

local SRI possible, possible hash-values:

sha256-p5teZZ5SfIgLzHzW5w0UjgoO1ImvJLN98k3BZIdNUYI=
sha384-pRUqUpwu+T7Q0Zbs8pCZD+zJNdzrQry0NUOsYZszJG4EIlK3S15bqA7fLMC52FuV
sha512-cTH1pYpCdMvyZiBEmq83tzr4mHs5t7dCZrq2Pt3uiq+u120GGhKHkcRHTSxC0H405Ro/Q0xTBipghJn5RE5uzg==

Content loaded via url("...")

./bootstrap-icons.woff?2820a3852bdb9a5832199cc61cec4e65

./bootstrap-icons.woff2?2820a3852bdb9a5832199cc61cec4e65

link

stylesheet

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/stylesheets/screen.min.css?v=8

200

text/css
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 118108 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-JYWHikDHF3Ek+Zs8tjrehZ9xtbhGidiKauLcLVcgTJA=
sha384-A85ZjoOgX45yK0cM7kVkoH8wAAiM9Q6O9hVpH/aaNgIK4tpHDR1y46JEUNzK0kUq
sha512-UrcSIw7A3dZFFuAaDTvnXFzkbSJgi+jeIzqJ1xAod+6IzXvPuyRNR7YpX/QETgReIIQutWrc3HynfLYkgf4oGQ==

Content loaded via url("...")

../img/bar-lines.png

../img/career-advice-landing-hero.png

../img/career-coaching-landing-hero.png

../img/career-insights-landing-hero.png

../img/filter-close-icon.png

../img/full-locked-page-bg.png

../img/graphics/bkgrd-400.png

../img/graphics/bkgrd-401.png

../img/graphics/bkgrd-403.png

../img/graphics/bkgrd-404.png

../img/graphics/bkgrd-429.png

../img/graphics/bkgrd-500.png

../img/graphics/bkgrd-501.png

../img/graphics/bkgrd-502.png

../img/graphics/bkgrd-503.png

../img/graphics/bkgrd-520.png

../img/graphics/bkgrd-preferred.png

../img/graphics/bkgrd-spotlight.png

../img/icon-down-arrow.svg

../img/icons-notification-off.svg

../img/icons-notification-on.svg

../img/occupation-hp-hero.png

../img/photos/bkgrd-upload-resume-1.jpg

../img/photos/hero-1.jpg

articleimgs/img1.jpg

articleimgs/img2.jpg

articleimgs/img3.jpg

articleimgs/img4.jpg

articleimgs/img5.jpg

data:image/svg+xml,%3C%3Fxml version='1.0' encoding='UTF-8'%3F%3E%3Csvg version='1.1' viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Ctitle%3EDown Icon%3C/title%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Crect width='24' height='24'/%3E%3Cpath d='m2.226 7.226c0.1443-0.14466 0.34023-0.22596 0.54455-0.22596 0.20433 0 0.40025 0.081301 0.54455 0.22596l8.6851 8.6867 8.6851-8.6867c0.19455-0.19455 0.47811-0.27053 0.74387-0.19932 0.26576 0.07121 0.47334 0.27879 0.54455 0.54455s-0.0047701 0.54932-0.19932 0.74387l-9.2297 9.2297c-0.1443 0.14466-0.34023 0.22596-0.54455 0.22596s-0.40025-0.081301-0.54455-0.22596l-9.2297-9.2297c-0.14466-0.1443-0.22596-0.34023-0.22596-0.54455 0-0.20433 0.081301-0.40025 0.22596-0.54455z' fill='%236B6B6B'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml,%3C%3Fxml version='1.0' encoding='UTF-8'%3F%3E%3Csvg width='16px' height='16px' viewBox='0 0 16 16' version='1.1' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink'%3E%3Cg id='Page-1' stroke='none' stroke-width='1' fill='none' fill-rule='evenodd'%3E%3Cg id='Group' fill='%236B6B6B' fill-rule='nonzero'%3E%3Cpath d='M11.5,1.00250628 C10.9641016,1.00250628 10.4689111,1.28840466 10.2009619,1.75250627 C9.93301268,2.21660789 9.93301268,2.78840467 10.2009619,3.25250629 C10.4689111,3.71660791 10.9641016,4.00250628 11.5,4.00250628 C12.3284271,4.00250628 13,3.3309334 13,2.50250628 C13,1.67407917 12.3284271,1.00250628 11.5,1.00250628 Z M9.05,2.00250628 C9.28659623,0.837344292 10.3110592,4.4408921e-16 11.5,4.4408921e-16 C12.6889408,4.4408921e-16 13.7134038,0.837344292 13.95,2.00250628 L16,2.00250628 L16,3.00250628 L13.95,3.00250628 C13.7134038,4.16766827 12.6889408,5.00501256 11.5,5.00501256 C10.3110592,5.00501256 9.28659623,4.16766827 9.05,3.00250628 L0,3.00250628 L0,2.00250628 L9.05,2.00250628 Z M4.5,6.00250628 C3.67157288,6.00250628 3,6.67407916 3,7.50250628 C3,8.33093341 3.67157288,9.00250628 4.5,9.00250628 C5.32842712,9.00250628 6,8.33093341 6,7.50250628 C6,6.67407916 5.32842712,6.00250628 4.5,6.00250628 L4.5,6.00250628 Z M2.05,7.00250628 C2.28659623,5.83734429 3.31105919,5 4.5,5 C5.68894081,5 6.71340377,5.83734429 6.95,7.00250628 L16,7.00250628 L16,8.00250628 L6.95,8.00250628 C6.71340377,9.16766827 5.68894081,10.0050126 4.5,10.0050126 C3.31105919,10.0050126 2.28659623,9.16766827 2.05,8.00250628 L0,8.00250628 L0,7.00250628 L2.05,7.00250628 Z M11.5,11.0025063 C10.6715729,11.0025063 10,11.6740792 10,12.5025063 C10,13.3309334 10.6715729,14.0025063 11.5,14.0025063 C12.3284271,14.0025063 13,13.3309334 13,12.5025063 C13,11.6740792 12.3284271,11.0025063 11.5,11.0025063 Z M9.05,12.0025063 C9.28659623,10.8373443 10.3110592,10 11.5,10 C12.6889408,10 13.7134038,10.8373443 13.95,12.0025063 L16,12.0025063 L16,13.0025063 L13.95,13.0025063 C13.7134038,14.1676683 12.6889408,15.0050126 11.5,15.0050126 C10.3110592,15.0050126 9.28659623,14.1676683 9.05,13.0025063 L0,13.0025063 L0,12.0025063 L9.05,12.0025063 L9.05,12.0025063 Z' id='Shape'%3E%3C/path%3E%3C/g%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml,%3csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3e%3cpath stroke='rgba(0, 0, 0, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3e%3cpath stroke='rgba(255, 255, 255, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23dc3545' viewBox='-2 -2 7 7'%3e%3cpath stroke='%23dc3545' d='M0 0l3 3m0-3L0 3'/%3e%3ccircle r='.5'/%3e%3ccircle cx='3' r='.5'/%3e%3ccircle cy='3' r='.5'/%3e%3ccircle cx='3' cy='3' r='.5'/%3e%3c/svg%3E	2

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 8 8'%3e%3cpath d='M2.75 0l-1.5 1.5 2.5 2.5-2.5 2.5 1.5 1.5 4-4-4-4z'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 8 8'%3e%3cpath d='M5.25 0l-4 4 4 4 1.5-1.5-2.5-2.5 2.5-2.5-1.5-1.5z'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 4'%3e%3cpath stroke='%23fff' d='M0 2h4'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3e%3cpath fill='%23343a40' d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e	3

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3e%3cpath fill='%2328a745' d='M2.3 6.73L.6 4.53c-.4-1.04.46-1.4 1.1-.8l1.1 1.4 3.4-3.8c.6-.63 1.6-.27 1.2.7l-4 4.6c-.43.5-.8.4-1.1.1z'/%3e%3c/svg%3e	2

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3e%3cpath fill='%23fff' d='M6.564.75l-3.59 3.612-1.538-1.55L0 4.26 2.974 7.25 8 2.193z'/%3e%3c/svg%3e	1

data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9Im5vIj8+PHN2ZyAgIHhtbG5zOmRjPSJodHRwOi8vcHVybC5vcmcvZGMvZWxlbWVudHMvMS4xLyIgICB4bWxuczpjYz0iaHR0cDovL2NyZWF0aXZlY29tbW9ucy5vcmcvbnMjIiAgIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyIgICB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiAgIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgICB3aWR0aD0iMTAiICAgaGVpZ2h0PSIxMCIgICB2ZXJzaW9uPSIxLjEiPiAgPGcgICAgIHRyYW5zZm9ybT0idHJhbnNsYXRlKDAsLTEwNDIuMzYyMikiICAgICBzdHlsZT0iZGlzcGxheTppbmxpbmUiPiAgICA8cGF0aCAgICAgICBzdHlsZT0iZmlsbDojMDAwMDAwO2ZpbGwtb3BhY2l0eTowLjQ5NDExNzY1O2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTpub25lIiAgICAgICBkPSJtIDcuNDI0MjE4NywxMDQyLjM2MjIgYyAtMC43MjM1NzkyLDAgLTEuMzEwMTU2MiwwLjU4NjYgLTEuMzEwMTU2MiwxLjMxMDIgMCwwLjI5OSAwLjEwNDM0MTksMC41NzEgMC4yNzI5NDkyLDAuNzkxNSAwLjIwOTEwMjQsMC4xNDEzIDAuNDY1NjIwNiwwLjIxODQgMC43MzY5NjI5LDAuMjE4NCAwLjcyMzU3OTMsMCAxLjMxMDE1NjMsLTAuNTg2NiAxLjMxMDE1NjMsLTEuMzEwMiAwLC0wLjI3MTMgLTAuMDc3MDkzLC0wLjUyNzggLTAuMjE4MzU5NCwtMC43MzcgLTAuMjIwNDk0MSwtMC4xNjg2IC0wLjQ5MjU0NDMsLTAuMjcyOSAtMC43OTE1NTI4LC0wLjI3MjkgeiBtIDAsMy4wODQzIGMgLTAuNzIzNTc5MiwwIC0xLjMxMDE1NjIsMC41ODY2IC0xLjMxMDE1NjIsMS4zMTAyIDAsMC4yOTkgMC4xMDQzNDE5LDAuNTcxIDAuMjcyOTQ5MiwwLjc5MTUgMC4yMDkxMDI0LDAuMTQxMyAwLjQ2NTYyMDYsMC4yMTg0IDAuNzM2OTYyOSwwLjIxODQgMC43MjM1NzkzLDAgMS4zMTAxNTYzLC0wLjU4NjYgMS4zMTAxNTYzLC0xLjMxMDIgMCwtMC4yNzEzIC0wLjA3NzA5MywtMC41Mjc4IC0wLjIxODM1OTQsLTAuNzM2OSAtMC4yMjA0OTQxLC0wLjE2ODYgLTAuNDkyNTQ0MywtMC4yNzMgLTAuNzkxNTUyOCwtMC4yNzMgeiBtIC0zLjA4NDMyNjEsMCBjIC0wLjcyMzU3OTMsMCAtMS4zMTAxNTYzLDAuNTg2NiAtMS4zMTAxNTYzLDEuMzEwMiAwLDAuMjk5IDAuMTA0MzQxOSwwLjU3MSAwLjI3Mjk0OTIsMC43OTE1IDAuMjA5MTAyNCwwLjE0MTMgMC40NjU2MjA3LDAuMjE4NCAwLjczNjk2MjksMC4yMTg0IDAuNzIzNTc5MywwIDEuMzEwMTU2MywtMC41ODY2IDEuMzEwMTU2MywtMS4zMTAyIDAsLTAuMjcxMyAtMC4wNzcwOTMsLTAuNTI3OCAtMC4yMTgzNTk0LC0wLjczNjkgLTAuMjIwNDk0LC0wLjE2ODYgLTAuNDkyNTQ0MiwtMC4yNzMgLTAuNzkxNTUyNywtMC4yNzMgeiBtIC0zLjAyOTczNjQsMy4wMjk4IEMgMC41ODY1NzY5MywxMDQ4LjQ3NjMgMCwxMDQ5LjA2MjggMCwxMDQ5Ljc4NjQgYyAwLDAuMjk5IDAuMTA0MzQxOSwwLjU3MTEgMC4yNzI5NDkyMiwwLjc5MTYgMC4yMDkxMDIyOSwwLjE0MTIgMC40NjU2MjA2NSwwLjIxODMgMC43MzY5NjI4OCwwLjIxODMgMC43MjM1NzkzLDAgMS4zMTAxNTYzLC0wLjU4NjUgMS4zMTAxNTYzLC0xLjMxMDEgMCwtMC4yNzE0IC0wLjA3NzA5MywtMC41Mjc5IC0wLjIxODM1OTQsLTAuNzM3IC0wLjIyMDQ5NDEsLTAuMTY4NiAtMC40OTI1NDQzLC0wLjI3MjkgLTAuNzkxNTUyOCwtMC4yNzI5IHogbSAzLjAyOTczNjQsMCBjIC0wLjcyMzU3OTMsMCAtMS4zMTAxNTYzLDAuNTg2NSAtMS4zMTAxNTYzLDEuMzEwMSAwLDAuMjk5IDAuMTA0MzQxOSwwLjU3MTEgMC4yNzI5NDkyLDAuNzkxNiAwLjIwOTEwMjQsMC4xNDEyIDAuNDY1NjIwNywwLjIxODMgMC43MzY5NjI5LDAuMjE4MyAwLjcyMzU3OTMsMCAxLjMxMDE1NjMsLTAuNTg2NSAxLjMxMDE1NjMsLTEuMzEwMSAwLC0wLjI3MTQgLTAuMDc3MDkzLC0wLjUyNzkgLTAuMjE4MzU5NCwtMC43MzcgLTAuMjIwNDk0LC0wLjE2ODYgLTAuNDkyNTQ0MiwtMC4yNzI5IC0wLjc5MTU1MjcsLTAuMjcyOSB6IG0gMy4wODQzMjYxLDAgYyAtMC43MjM1NzkyLDAgLTEuMzEwMTU2MiwwLjU4NjUgLTEuMzEwMTU2MiwxLjMxMDEgMCwwLjI5OSAwLjEwNDM0MTksMC41NzExIDAuMjcyOTQ5MiwwLjc5MTYgMC4yMDkxMDI0LDAuMTQxMiAwLjQ2NTYyMDYsMC4yMTgzIDAuNzM2OTYyOSwwLjIxODMgMC43MjM1NzkzLDAgMS4zMTAxNTYzLC0wLjU4NjUgMS4zMTAxNTYzLC0xLjMxMDEgMCwtMC4yNzE0IC0wLjA3NzA5MywtMC41Mjc5IC0wLjIxODM1OTQsLTAuNzM3IC0wLjIyMDQ5NDEsLTAuMTY4NiAtMC40OTI1NDQzLC0wLjI3MjkgLTAuNzkxNTUyOCwtMC4yNzI5IHoiLz4gIDwvZz4gIDxnICAgICBzdHlsZT0iZGlzcGxheTppbmxpbmUiPiAgICA8cGF0aCAgICAgICBzdHlsZT0iZmlsbDojZmZmZmZmO2ZpbGwtb3BhY2l0eToxO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTpub25lIiAgICAgICBkPSJtIDguMjE1NzcxNSwwLjI3Mjk0OTIyIGMgMC4xNDEyNjY3LDAuMjA5MTAyMjkgMC4yMTgzNTk0LDAuNDY1NjIwNjUgMC4yMTgzNTk0LDAuNzM2OTYyODggMCwwLjcyMzU3OTMgLTAuNTg2NTc3LDEuMzEwMTU2MyAtMS4zMTAxNTYzLDEuMzEwMTU2MyAtMC4yNzEzNDIzLDAgLTAuNTI3ODYwNSwtMC4wNzcwOTMgLTAuNzM2OTYyOSwtMC4yMTgzNTk0IDAuMjM5NDEwNCwwLjMxMzA4NTkgMC42MTI2MzYyLDAuNTE4NjAzNSAxLjAzNzIwNywwLjUxODYwMzUgMC43MjM1NzkzLDAgMS4zMTAxNTYzLC0wLjU4NjU3NyAxLjMxMDE1NjMsLTEuMzEwMTU2MyAwLC0wLjQyNDU3MDc2IC0wLjIwNTUxNzYsLTAuNzk3Nzk2NTkgLTAuNTE4NjAzNSwtMS4wMzcyMDY5OCB6IG0gMCwzLjA4NDMyNjE4IGMgMC4xNDEyNjY3LDAuMjA5MTAyMyAwLjIxODM1OTQsMC40NjU2MjA2IDAuMjE4MzU5NCwwLjczNjk2MjkgMCwwLjcyMzU3OTMgLTAuNTg2NTc3LDEuMzEwMTU2MiAtMS4zMTAxNTYzLDEuMzEwMTU2MiAtMC4yNzEzNDIzLDAgLTAuNTI3ODYwNSwtMC4wNzcwOTMgLTAuNzM2OTYyOSwtMC4yMTgzNTkzIDAuMjM5NDEwNCwwLjMxMzA4NTkgMC42MTI2MzYyLDAuNTE4NjAzNSAxLjAzNzIwNywwLjUxODYwMzUgMC43MjM1NzkzLDAgMS4zMTAxNTYzLC0wLjU4NjU3NyAxLjMxMDE1NjMsLTEuMzEwMTU2MyAwLC0wLjQyNDU3MDggLTAuMjA1NTE3NiwtMC43OTc3OTY3IC0wLjUxODYwMzUsLTEuMDM3MjA3IHogbSAtMy4wODQzMjYyLDAgYyAwLjE0MTI2NjcsMC4yMDkxMDIzIDAuMjE4MzU5NCwwLjQ2NTYyMDYgMC4yMTgzNTk0LDAuNzM2OTYyOSAwLDAuNzIzNTc5MyAtMC41ODY1NzcsMS4zMTAxNTYyIC0xLjMxMDE1NjMsMS4zMTAxNTYyIC0wLjI3MTM0MjIsMCAtMC41Mjc4NjA1LC0wLjA3NzA5MyAtMC43MzY5NjI5LC0wLjIxODM1OTMgMC4yMzk0MTA0LDAuMzEzMDg1OSAwLjYxMjYzNjMsMC41MTg2MDM1IDEuMDM3MjA3MSwwLjUxODYwMzUgMC43MjM1NzkzLDAgMS4zMTAxNTYyLC0wLjU4NjU3NyAxLjMxMDE1NjIsLTEuMzEwMTU2MyAwLC0wLjQyNDU3MDggLTAuMjA1NTE3NSwtMC43OTc3OTY3IC0wLjUxODYwMzUsLTEuMDM3MjA3IHogTSAyLjEwMTcwOSw2LjM4NzAxMTcgYyAwLjE0MTI2NjcsMC4yMDkxMDI0IDAuMjE4MzU5NCwwLjQ2NTYyMDYgMC4yMTgzNTk0LDAuNzM2OTYyOSAwLDAuNzIzNTc5MyAtMC41ODY1NzcsMS4zMTAxNTYzIC0xLjMxMDE1NjMsMS4zMTAxNTYzIC0wLjI3MTM0MjIzLDAgLTAuNTI3ODYwNTksLTAuMDc3MDkzIC0wLjczNjk2Mjg4LC0wLjIxODM1OTQgMC4yMzk0MTAzOSwwLjMxMzA4NTkgMC42MTI2MzYyMiwwLjUxODYwMzUgMS4wMzcyMDY5OCwwLjUxODYwMzUgMC43MjM1NzkzLDAgMS4zMTAxNTYzLC0wLjU4NjU3NyAxLjMxMDE1NjMsLTEuMzEwMTU2MyAwLC0wLjQyNDU3MDggLTAuMjA1NTE3NiwtMC43OTc3OTY2IC0wLjUxODYwMzUsLTEuMDM3MjA3IHogbSAzLjAyOTczNjMsMCBjIDAuMTQxMjY2NywwLjIwOTEwMjQgMC4yMTgzNTk0LDAuNDY1NjIwNiAwLjIxODM1OTQsMC43MzY5NjI5IDAsMC43MjM1NzkzIC0wLjU4NjU3NywxLjMxMDE1NjMgLTEuMzEwMTU2MywxLjMxMDE1NjMgLTAuMjcxMzQyMiwwIC0wLjUyNzg2MDUsLTAuMDc3MDkzIC0wLjczNjk2MjksLTAuMjE4MzU5NCAwLjIzOTQxMDQsMC4zMTMwODU5IDAuNjEyNjM2MywwLjUxODYwMzUgMS4wMzcyMDcxLDAuNTE4NjAzNSAwLjcyMzU3OTMsMCAxLjMxMDE1NjIsLTAuNTg2NTc3IDEuMzEwMTU2MiwtMS4zMTAxNTYzIDAsLTAuNDI0NTcwOCAtMC4yMDU1MTc1LC0wLjc5Nzc5NjYgLTAuNTE4NjAzNSwtMS4wMzcyMDcgeiBtIDMuMDg0MzI2MiwwIGMgMC4xNDEyNjY3LDAuMjA5MTAyNCAwLjIxODM1OTQsMC40NjU2MjA2IDAuMjE4MzU5NCwwLjczNjk2MjkgMCwwLjcyMzU3OTMgLTAuNTg2NTc3LDEuMzEwMTU2MyAtMS4zMTAxNTYzLDEuMzEwMTU2MyAtMC4yNzEzNDIzLDAgLTAuNTI3ODYwNSwtMC4wNzcwOTMgLTAuNzM2OTYyOSwtMC4yMTgzNTk0IDAuMjM5NDEwNCwwLjMxMzA4NTkgMC42MTI2MzYyLDAuNTE4NjAzNSAxLjAzNzIwNywwLjUxODYwMzUgMC43MjM1NzkzLDAgMS4zMTAxNTYzLC0wLjU4NjU3NyAxLjMxMDE1NjMsLTEuMzEwMTU2MyAwLC0wLjQyNDU3MDggLTAuMjA1NTE3NiwtMC43OTc3OTY2IC0wLjUxODYwMzUsLTEuMDM3MjA3IHoiIC8+ICA8L2c+PC9zdmc+	1

img/navigate.png

link

stylesheet

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/styles/swiper/swiper-bundle.min.css

200

text/css
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 4785 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-ErFvUBVyFQBZ971SHcpIntTdXuzgP5ZIFCXJWtdfvDE=
sha384-Y736j4RZ4YblSpC5EKw+Ks/5LEwFIzDBxnagv/5XV3aTYd1VX81rOYdquS52wOJh
sha512-Yi1z1GCs+1VnPR94FHqzuBt3UF/VR2itkrclFtSXzdUUhaJCSmyB78eNIknfORV/yHUeqbixAqUw+HgOqfYqdQ==

Content loaded via url("...")

data:application/font-woff;charset=utf-8;base64, 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

link

stylesheet

https://fonts.googleapis.com/css?family=Oswald:400

200

text/css; charset=utf-8
X-Content-Type-Options nosniff found

192 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-giiNbItvju/gqWSkVmYJeOI3A8GleBOamriaJoQAeBA=
sha384-GKUjbkNJHPTsf+ndiX0MvNbQSE97P3VMyvucUFwqZfdKbCyTlfdAAzJ2LVaiwIpE
sha512-+M8nbJbZ4Df4tM1UZnWzO6jmLjj00axwbP3Jp186kblhjso9xYD+Vp4OS+kmVKpKR6Y7LBTG8f5Xmk29TxLsCA==

Content loaded via url("...")

https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiYA.ttf

link

stylesheet

https://fonts.googleapis.com/css?family=Roboto:400,500,700,700italic,400italic|Montserrat:400,700|Inter:400,600

200

text/css; charset=utf-8
X-Content-Type-Options nosniff found

Compression required: 387 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-wxXv3tKjaCjrbJsPIENxih62vBrQTCgPob+gKSjSvx4=
sha384-IZ40SYZuIXe7Bl5Otr+VghrPVKRYudWysDPLHhqPu0w9hn04OwbYElUP/dMHTEPs
sha512-0KQf3mCSEpSziyXVC/SeD58+QW49IUv5Hb0dM1z6kzBQEHbNQkE6Dexs32gOfnIOT55HojHPEcvsDbwCXsEo5g==

Content loaded via url("...")

https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuGKYAZ9hjQ.ttf

https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZ9hjQ.ttf

https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aX8.ttf

https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aX8.ttf

https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsE.ttf

https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzc.ttf

https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc9.ttf

https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf

https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf

meta

charset

utf-8

meta

og:description

National Bicycle Dealers Association offers the top jobs available in Bicycle Dealer. Search and apply to open positions or post jobs on National Bicycle Dealers Association now.

meta

og:image

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/headers/cc/responsive/partner_lib/23874/img/logo-23874.png

200

image/png
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 23322 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

meta

og:title

Bicycle Dealer Jobs - National Bicycle Dealers Association

meta

og:type

website

meta

og:url

https://careers.nbda.com?site_id=23874

200

text/html; charset=UTF-8
X-Content-Type-Options nosniff found

137548 Bytes

meta

X-UA-Compatible

IE=edge,chrome=1

meta

description

National Bicycle Dealers Association offers the top jobs available in Bicycle Dealer. Search and apply to open positions or post jobs on National Bicycle Dealers Association now.

meta

twitter:card

summary_large_image

meta

twitter:description

National Bicycle Dealers Association offers the top jobs available in Bicycle Dealer. Search and apply to open positions or post jobs on National Bicycle Dealers Association now.

meta

viewport

width=device-width, initial-scale=1

script

src

//translate.google.com/translate_a/element.js?cb=googleTranslateElementInit

200

Missing defer / async attribute.

text/javascript; charset=utf-8
X-Content-Type-Options nosniff found

Cache-Control: no-store, must-revalidate, no-cache, max-age=0 - max-age too short.

Compression required: 31548 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

script

src

/javascript/featured_services_carousel.js

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

566 Bytes

local SRI possible, possible hash-values:

sha256-zcBmCVVi6+AjbGQnp987V4ElTuOApip17IeZyG5mIQ0=
sha384-paleZYOKKT1UC6NXVagk6gEZ8jq3qVpP+lTO8lD/KTWinT8bl9bvqlXWz7AgVe+3
sha512-X5NleEOcDB1BmfjfFlKDFiTJLY9gloBJUYBWSywG9NKo21G6DaGXvFMcWtV9SiVLtnYte4ZJdUGZukLQ3+U6Ww==

script

src

https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js

200

Missing defer / async attribute.

application/javascript; charset=utf-8
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=30672000 - with long duration found.

Compression required: 31017 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

integrity: sha512-894YE6QWD5I59HgZOGReFYm4dnWc1Qt5NtvYSaNcOP+u1T9qYdvdihz0PPSiiqn/+/3e7Jo4EaG7TubfWGUrMQ==
crossorigin: anonymous

No SRI Parse error

valid

script

src

https://code.jquery.com/ui/1.12.1/jquery-ui.min.js

200

Missing defer / async attribute.

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 - with long duration found.

Compression required: 67751 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

integrity: sha256-VazP97ZCwtekAsvgPBSUwPFKdrwD3unUfSGVYrahUqU=
crossorigin: anonymous

No SRI Parse error

valid

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/js/doubletaptogo.min.js

200

defer attribute found

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

585 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-NzhGc6+NZmHsXOmwF3I0JkRPgLBl4W56KmbQ+oHtn88=
sha384-nm3PkGjUquCYpOucdQJdbqggxQKar6eN4UqlIs4unmaFFpnxl3wV8WYeMUNmygrt
sha512-tsJb/klUG9knFm5j+lD3B3NSZ7qwMpGes2lKctgbw69zHNVPu9HK7R/DJ+flX3aSWlCaMjl6dngDnKCVMvz/kA==

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/js/jquery.mousewheel.min.js

200

defer attribute found

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 1253 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-jnOjDTXIPqall8M0MyTSt98JetJuZ7Yu+1Jm7hLTF7U=
sha384-jx+EoRqSnwNqHsZoMJl/OMDriDdzqdPXunQMsJOq6eUISEJxQkBgcR88EFkA2iHw
sha512-rCjfoab9CVKOH/w/T6GbBxnAH5Azhy4+q1EXW5XEURefHbIkRbQ++ZR+GBClo3/d3q583X/gO4FKmOFuhkKrdA==

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/js/jquery.steps.js

200

defer attribute found

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 4864 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-LVUcFN4FnaURUYqYHDfiF8Uf6LGY59dQcmeYHoqPjRw=
sha384-RJBV4mbKs8DnSc7WfWvJQgUQfHL2KmyHzlsV50OoKhAGgPlJOF+64SpzA8xFh3Tg
sha512-UnbsBO4mPaBJfrKLYmtxExndKckdk3853CfqZDXxyFDJQjySoZ6KPgGvCk50isbKKTCRa50qHiqDQ8eXznjS9w==

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/js/jquery.tooltipster.min.js

200

defer attribute found

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 4747 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-NdB/3Be4WA79TLl7NvZNHgrxxddMc2ca2mnOM/eOqtA=
sha384-cgjPpeQin/0Vnr6AHo+DcVj073OYVKh0YOpzeOHOnY3xk9Y4IGKMgqt3yrDt/Z1T
sha512-RB+28ggv6zQHReqtZgwD03OjCezHlyWppNp5ItEcNBjXe9Y7JuqCFUS6AZHYh5HtWgsBt6zdGfd8usbWRRqD3Q==

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/js/libraries/bootstrap.min.js?v=3

200

defer attribute found

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 21491 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-MSYVjWgrr6UL/9eQfQvOyt6/gsxb6dpwI1zqM5DbLCs=
sha384-zDnhMsjVZfS3hiP7oCBRmfjkQC4fzxVxFhBx8Hkz2aZX8gEvA/jsP3eXRCvzTofP
sha512-uo0BDK5V972jjjo8Z0vohOa6WOTIPaRGPI/Pg3GLzErcfOK8bkZpY3aHfG1WwS2uZ6cJ6GcrRiO4mRCJjGWOhQ==

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/js/libraries/jquery.cookie-1.3.1.js

200

defer attribute found

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 1086 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-4gEMLnQ0CsP4QfYVQRcFmjMYZk1RHNRJMSMY6CMq+Io=
sha384-rknNY9FGpSjEdkA8xHvY3/7iEHBkwwM7SIBkr8ZSwkWdb770pZ6Q8zKdTKwoKAoZ
sha512-j58o0Qsso9DiLXbi5j6a5Z0dzYoDbIPifysrxQg7GclGiQbFV97CK0QP97Bss220etfPQg+2bDm3//2RKSXnAw==

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/js/owl.carousel.init.js

200

defer attribute found

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 479 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-pOTi0IoJz1fXH5tW0AU1qjI1oOxkotsmSu38XntlRSA=
sha384-5lp9mSXw0TD1aEIqwryiy5f1qqIJ1xwng6iVTC78z6/oikaz9S//la9OgW/Xu52k
sha512-fl8ZDryCbxjecOHgIEGMbtQs+WwzJjWTNIA7mCGWJSVmfbEGieCCtRugcg0EO+ZzdziLWazzgSY1igqukeahnw==

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/js/owl.carousel.min.js

200

defer attribute found

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 10580 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-91n7RVybVwddTCCO0chazX9dSQkJ4XoVaHqyBCXUAmM=
sha384-uZQtGYYRgmAruAEaBjclVg9ZKQIPpqNAkHirBAFTX60mvbk5TVpV/4STK+IZHo1u
sha512-sWp2/ITMSdOGgTI87tW1kIdNSx3cYNFqXX8FokQ4uxghM/MluXPl7S+W2iSGA3YW6RrPY6HJMHB0ASCicYdHfg==

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/javascript/marked/marked.min.js

200

defer attribute found

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 16110 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-/s6ytCkx84Fd4oiHfa3RCg3yGZ7AZRsf9iYMzuoq0cw=
sha384-48D1ZRc1cRWg7ftDdSM8tR7jzOl3uoKNaNG4dhOiXH28USDsQxQjk8Fl0F2nPCUO
sha512-/1Zn6z2A/OyEjUSAWkK6rLM6kWn7hM2YuLxnOy6yqvZOsSbVCy2qbS/kB4MxFYXgoFxxydxAWSfLb7b8Ny/rEQ==

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/javascript/modernizr/modernizr.min.js

200

defer attribute found

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 1478 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-F46ZVOxJwicS+XOGAwFDdHZz6lv1oGz6r1Z4neHeNhA=
sha384-Xp0rAFdVgXszlbL4Pq+4uFx9REnk7FIAMLzKKSQXqtPG52VTDTrr1etyZakuybXt
sha512-zXyOhYGgNNwYF8mLHOAKSGPCahWF0bdx9J7UKfwhL1ZALglM+3jZ8NPJkzJ1OOZtBgKnbaqp9ts3zk0s8sfShQ==

script

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/javascript/swiper/swiper-bundle.min.js

200

Missing defer / async attribute.

text/javascript
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 41447 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-5L1oH+R8pdjzJPVm5Wkss/LPLnCpfKHWK/TEZs39v9c=
sha384-SvdWrPZw++vt41gWhst9/Nk7mmJJSxv79j0Ko7swq2MChQHenc7nX0GWopgegOEk
sha512-a1OvzbYxKZbySL3RLfpbZNLCP+AOet+2GMr6Wjc6L7ekoNuJNps2MYRAZf09osoDuxT238JYERJREHQfbeseQg==

style

/images/new/button_short_white_left.gif

200

image/gif
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

No Compression - 687 Bytes

style

/images/new/button_short_white_right.gif

200

image/gif
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

No Compression - 368 Bytes

style

/images/new/button_white_left.gif

200

image/gif
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

No Compression - 768 Bytes

style

/images/new/button_white_right.gif

200

image/gif
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

No Compression - 388 Bytes

style

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/img/photos/bkgrd-upload-resume-2.jpg

200

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 44434 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

style

owl.video.play.png

404

Not Found

missing file

text/html; charset=UTF-8
missing X-Content-Type-Options nosniff

0 Bytes

3.217.202.200

/account/

/c/resumes/edit/upload.cfm?site_id=23874

/c/sitemap.cfm?site_id=23874

/c/terms/privacy.cfm?site_id=23874

/c/terms/tou.cfm?site_id=23874

/career-advice/

/career-advice/4-things-you-forgot-to-include-on-your-resume/117/

/career-advice/5-ways-to-adjust-your-body-language-to-come-across-as-more-confident-in-an-interview/119/

/career-advice/7-things-a-job-seeker-should-never-include-on-their-resume-our-resume-writers-weigh-in/118/

/career-advice/a-top-notch-resume-is-your-gateway-to-the-job-interview/116/

/career-advice/authors/carrie-maldonado/29/

/career-advice/authors/carson-kohler/38/

/career-advice/authors/jenna-mantis/27/

/career-advice/authors/natalia-autenrieth/37/

/career-advice/topics/interviewing/4/

/career-advice/topics/resumes-cover-letters/3/

/career-coaching/

/career-insights/

/directory/

/employer/candidates/

/employer/clients/

/employer/company/

/employer/help/

/employer/my-account/

/employer/my-jobs/

/employer/post/

/employer/pricing/

/employer/pricing/?extre=1

/employer/resumes/results/

/employer/templates/

/help/

/job/alerts/

/job/search/

/jobs/

/jobseeker/privacy/#cookies

/pricing/

/resumes/

http://careers.nbda.com/jobseeker/search/results/

https://careers.nbda.com/job/bicycle-assembly-technician/ba5122c0-30363824776/

https://careers.nbda.com/job/bicycle-retail-inventory-associate/ba5122c0-30360179850/

https://careers.nbda.com/job/bicycle-salesretail-indianapolis-in/ba5122c0-29281676873/

https://careers.nbda.com/job/bicycle-store-managerretail/ba5122c0-30262017975/

https://nbda.careerwebsite.com/career-advice/career-growth/

https://nbda.com

https://nbda.com/events/#!calendar

https://nbda.com/join-the-nbda/#join

https://twitter.com/NBDARetailers

https://www.facebook.com/NBDARetailers/

https://www.linkedin.com/company/national-bicycle-dealers-association

https://ymcareers.com?utm_source=in-app&utm_medium=referral&utm_campaign=job-boards-footer

mailto:clientserv@yourmembership.com?Subject=National Bicycle Dealers Association Inquiry

form

post

/jobs/

200

text/html; charset=UTF-8
X-Content-Type-Options nosniff found

411593 Bytes

iframe

src

https://www.googletagmanager.com/ns.html?id=GTM-MQ4769R

img

src

/headers/cc/responsive/img/logo-powered-by-cb.png

200

alt: YM Careers Logo

image/png
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

No Compression - 4521 Bytes

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/avatar_0db64b28f9.jpg

200

alt: Author Carrie Maldonado

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 8326 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/avatar_6b379f4f5b.jpg

200

alt: Author Natalia Autenrieth

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 21176 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/avatar_7a4899aa08.jpg

200

alt: Author Carson Kohler

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 35927 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/avatar_bde9ef28ae.jpg

200

alt: Author Jenna Mantis

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 35869 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/homepage_image_3d7f9585bb.jpg

200

alt: A Top Notch Resume is Your Gateway to the Job Interview

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 19352 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/thumbnail_3ec86dbabe.jpg

200

alt: 4 Things You Forgot to Include on Your Resume

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 17867 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/thumbnail_4dab94c7f8.jpg

200

alt: 5 Ways to Adjust your Body Language to Come Across as More Confident in an Interview

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 13479 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/careerpaths-cms/thumbnail_eca74900bf.jpg

200

alt: 7 Things a Job Seeker Should Never Include on Their Resume - Our Resume Writers Weigh In

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 10267 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/headers/cc/responsive/partner_lib/23874/img/featured_services/Calendar.jpg

200

alt: Events

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 15122 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/headers/cc/responsive/partner_lib/23874/img/featured_services/Career Growth.jpg

200

alt: Career Growth

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 23406 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/headers/cc/responsive/partner_lib/23874/img/featured_services/MCBA_Join_Us.jpg

200

alt: Become a Member

image/jpeg
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 20154 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

img

src

https://d3ogvqw9m2inp7.cloudfront.net/assets/dynamic/headers/cc/responsive/partner_lib/23874/img/logo-23874.png

200

alt: National Bicycle Dealers Association

image/png
missing X-Content-Type-Options nosniff

No Cache-Control header

No Compression - 23322 Bytes

Server-Header Access-Control-Allow-Origin: not found

Cross-Origin Resource Sharing (CORS) not supported

link

icon

/favicon.png?v=1

200

image/png
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

No Compression - 1522 Bytes

link

stylesheet

//use.fontawesome.com/e7f7322296.css

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=1800 - max-age too short.

Compression required: 367 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

Content loaded via url("...")

//use.fontawesome.com/releases/v4.7.0/css/font-awesome-css.min.css

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.eot

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.eot?#iefix

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.svg#fontawesomeregular

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.ttf

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.woff

//use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.woff2

link

stylesheet

/headers/cc/responsive/partner_lib/23874/custom.css?v=2

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

Compression required: 33433 Bytes

local SRI possible, possible hash-values:

Content loaded via url("...")

img/hero-23874.jpg

link

stylesheet

/styles/bootstrap-icons-min.css

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: public, max-age=10800 - max-age too short.

Compression required: 13337 Bytes

local SRI possible, possible hash-values:

Content loaded via url("...")

./bootstrap-icons.woff?2820a3852bdb9a5832199cc61cec4e65

./bootstrap-icons.woff2?2820a3852bdb9a5832199cc61cec4e65

link

stylesheet

https://d3ogvqw9m2inp7.cloudfront.net/assets/static/headers/cc/responsive/stylesheets/screen.min.css?v=8

200

text/css
missing X-Content-Type-Options nosniff

No Cache-Control - header

Compression required: 118108 Bytes

Server-Header Access-Control-Allow-Origin: *

Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

Content loaded via url("...")

../img/bar-lines.png

../img/career-advice-landing-hero.png

../img/career-coaching-landing-hero.png

../img/career-insights-landing-hero.png

../img/filter-close-icon.png

../img/full-locked-page-bg.png

../img/graphics/bkgrd-400.png

../img/graphics/bkgrd-401.png

../img/graphics/bkgrd-403.png

../img/graphics/bkgrd-404.png

../img/graphics/bkgrd-429.png

../img/graphics/bkgrd-500.png

../img/graphics/bkgrd-501.png

../img/graphics/bkgrd-502.png

../img/graphics/bkgrd-503.png

../img/graphics/bkgrd-520.png

../img/graphics/bkgrd-preferred.png

../img/graphics/bkgrd-spotlight.png

../img/icon-down-arrow.svg

../img/icons-notification-off.svg

../img/icons-notification-on.svg

../img/occupation-hp-hero.png

../img/photos/bkgrd-upload-resume-1.jpg

../img/photos/hero-1.jpg

articleimgs/img1.jpg

articleimgs/img2.jpg

articleimgs/img3.jpg

articleimgs/img4.jpg

articleimgs/img5.jpg

data:image/svg+xml,%3C%3Fxml version='1.0' encoding='UTF-8'%3F%3E%3Csvg version='1.1' viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Ctitle%3EDown Icon%3C/title%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Crect width='24' height='24'/%3E%3Cpath d='m2.226 7.226c0.1443-0.14466 0.34023-0.22596 0.54455-0.22596 0.20433 0 0.40025 0.081301 0.54455 0.22596l8.6851 8.6867 8.6851-8.6867c0.19455-0.19455 0.47811-0.27053 0.74387-0.19932 0.26576 0.07121 0.47334 0.27879 0.54455 0.54455s-0.0047701 0.54932-0.19932 0.74387l-9.2297 9.2297c-0.1443 0.14466-0.34023 0.22596-0.54455 0.22596s-0.40025-0.081301-0.54455-0.22596l-9.2297-9.2297c-0.14466-0.1443-0.22596-0.34023-0.22596-0.54455 0-0.20433 0.081301-0.40025 0.22596-0.54455z' fill='%236B6B6B'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml,%3C%3Fxml version='1.0' encoding='UTF-8'%3F%3E%3Csvg width='16px' height='16px' viewBox='0 0 16 16' version='1.1' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink'%3E%3Cg id='Page-1' stroke='none' stroke-width='1' fill='none' fill-rule='evenodd'%3E%3Cg id='Group' fill='%236B6B6B' fill-rule='nonzero'%3E%3Cpath d='M11.5,1.00250628 C10.9641016,1.00250628 10.4689111,1.28840466 10.2009619,1.75250627 C9.93301268,2.21660789 9.93301268,2.78840467 10.2009619,3.25250629 C10.4689111,3.71660791 10.9641016,4.00250628 11.5,4.00250628 C12.3284271,4.00250628 13,3.3309334 13,2.50250628 C13,1.67407917 12.3284271,1.00250628 11.5,1.00250628 Z M9.05,2.00250628 C9.28659623,0.837344292 10.3110592,4.4408921e-16 11.5,4.4408921e-16 C12.6889408,4.4408921e-16 13.7134038,0.837344292 13.95,2.00250628 L16,2.00250628 L16,3.00250628 L13.95,3.00250628 C13.7134038,4.16766827 12.6889408,5.00501256 11.5,5.00501256 C10.3110592,5.00501256 9.28659623,4.16766827 9.05,3.00250628 L0,3.00250628 L0,2.00250628 L9.05,2.00250628 Z M4.5,6.00250628 C3.67157288,6.00250628 3,6.67407916 3,7.50250628 C3,8.33093341 3.67157288,9.00250628 4.5,9.00250628 C5.32842712,9.00250628 6,8.33093341 6,7.50250628 C6,6.67407916 5.32842712,6.00250628 4.5,6.00250628 L4.5,6.00250628 Z M2.05,7.00250628 C2.28659623,5.83734429 3.31105919,5 4.5,5 C5.68894081,5 6.71340377,5.83734429 6.95,7.00250628 L16,7.00250628 L16,8.00250628 L6.95,8.00250628 C6.71340377,9.16766827 5.68894081,10.0050126 4.5,10.0050126 C3.31105919,10.0050126 2.28659623,9.16766827 2.05,8.00250628 L0,8.00250628 L0,7.00250628 L2.05,7.00250628 Z M11.5,11.0025063 C10.6715729,11.0025063 10,11.6740792 10,12.5025063 C10,13.3309334 10.6715729,14.0025063 11.5,14.0025063 C12.3284271,14.0025063 13,13.3309334 13,12.5025063 C13,11.6740792 12.3284271,11.0025063 11.5,11.0025063 Z M9.05,12.0025063 C9.28659623,10.8373443 10.3110592,10 11.5,10 C12.6889408,10 13.7134038,10.8373443 13.95,12.0025063 L16,12.0025063 L16,13.0025063 L13.95,13.0025063 C13.7134038,14.1676683 12.6889408,15.0050126 11.5,15.0050126 C10.3110592,15.0050126 9.28659623,14.1676683 9.05,13.0025063 L0,13.0025063 L0,12.0025063 L9.05,12.0025063 L9.05,12.0025063 Z' id='Shape'%3E%3C/path%3E%3C/g%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml,%3csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3e%3cpath stroke='rgba(0, 0, 0, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3e%3cpath stroke='rgba(255, 255, 255, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23dc3545' viewBox='-2 -2 7 7'%3e%3cpath stroke='%23dc3545' d='M0 0l3 3m0-3L0 3'/%3e%3ccircle r='.5'/%3e%3ccircle cx='3' r='.5'/%3e%3ccircle cy='3' r='.5'/%3e%3ccircle cx='3' cy='3' r='.5'/%3e%3c/svg%3E	2

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 8 8'%3e%3cpath d='M2.75 0l-1.5 1.5 2.5 2.5-2.5 2.5 1.5 1.5 4-4-4-4z'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 8 8'%3e%3cpath d='M5.25 0l-4 4 4 4 1.5-1.5-2.5-2.5 2.5-2.5-1.5-1.5z'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 4'%3e%3cpath stroke='%23fff' d='M0 2h4'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3e%3cpath fill='%23343a40' d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e	3

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3e%3cpath fill='%2328a745' d='M2.3 6.73L.6 4.53c-.4-1.04.46-1.4 1.1-.8l1.1 1.4 3.4-3.8c.6-.63 1.6-.27 1.2.7l-4 4.6c-.43.5-.8.4-1.1.1z'/%3e%3c/svg%3e	2

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3e%3cpath fill='%23fff' d='M6.564.75l-3.59 3.612-1.538-1.55L0 4.26 2.974 7.25 8 2.193z'/%3e%3c/svg%3e	1

data:image/svg+xml;base64,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	1