https://careers.fedex.com/courier-feeder-agt-dot/job/P25-132708-2

Submitted URL:
https://careers.fedex.com/courier-feeder-agt-dot/job/P25-132708-2
Report Finished:

Risks · 0 found

Security Headers · 8 found

NameValueSupportInfo
Strict-Transport-Securitymax-age=31536000; includeSubDomainsGoodDeclare that a website is only accessible over a secure connection (HTTPS).

Click to learn more...
X-Frame-OptionssameoriginGoodIndicate whether a browser should be allowed to render a page in a <frame>, <iframe>, <embed> or <object>.

Click to learn more...
X-Content-Type-OptionsnosniffGoodIndicate that the MIME types advertised in the Content-Type headers should be followed and not be changed.

Click to learn more...
Content-Security-Policyimg-src 'self' data: dy5f5j6i37p1a.cloudfront.net d2xra9v1z0mbwm.cloudfront.net * pixel.quantserve.com olivia.paradox.ai dokumfe7mps0i.cloudfront.net d386an9otcxw2c.cloudfront.net d2i2zd9axwkr7h.cloudfront.net fei.pro-market.net d2k2mg2temmavv.cloudfront.net www.googleadservices.com um.simpli.fi cm.g.doubleclick.net us-u.openx.net pixel.rubiconproject.com www.googletagmanager.com fonts.gstatic.com i.ytimg.com *.google-analytics.com ib.adnxs.com idsync.rlcdn.com ce.lijit.com stags.bluekai.com bcp.crwdcntrl.net *.recruiting.com *.paradox.ai; font-src d2ir6gu3mx7cqv.cloudfront.net dokumfe7mps0i.cloudfront.net d386an9otcxw2c.cloudfront.net d2k2mg2temmavv.cloudfront.net d2i2zd9axwkr7h.cloudfront.net maxcdn.bootstrapcdn.com fonts.gstatic.com cdnjs.cloudflare.com 'self' data: *.paradox.ai; frame-src 'self' *.recruiting.com www.youtube.com www.google.com www.youtube-nocookie.com cdnapisec.kaltura.com; style-src 'self' https: dy5f5j6i37p1a.cloudfront.net dokumfe7mps0i.cloudfront.net d2k2mg2temmavv.cloudfront.net d2i2zd9axwkr7h.cloudfront.net 'unsafe-inline' *.paradox.ai; script-src 'self' *.googleapis.com d2ir6gu3mx7cqv.cloudfront.net secure.quantserve.com tag.simpli.fi d386an9otcxw2c.cloudfront.net www.clarity.ms *.clarity.ms bat.bing.com analytics.tiktok.com rules.quantcount.com www.youtube.com player.vimeo.com *.google-analytics.com d2i2zd9axwkr7h.cloudfront.net cdnapisec.kaltura.com *.googletagmanager.com www.gstatic.com *.pardot.com dokumfe7mps0i.cloudfront.net analytics.tiktok.com i.simpli.fi www.google.com 'unsafe-inline' 'unsafe-eval' *.paradox.ai; default-src 'self' *.recruiting.com *.clarity.ms analytics.tiktok.com *.google-analytics.com stats.g.doubleclick.net olivia.paradox.ai d2xra9v1z0mbwm.cloudfront.net d2i2zd9axwkr7h.cloudfront.net dy5f5j6i37p1a.cloudfront.net d386an9otcxw2c.cloudfront.net dokumfe7mps0i.cloudfront.net o1000039.ingest.sentry.io wss://ws.fedex.paradox.ai cdn.plyr.io wss://ws.paradox.ai *.paradox.ai; form-action 'self'; frame-ancestors 'self'; object-src 'none'; GoodControl resources the user agent is allowed to load for a given page.

Click to learn more...
Referrer-Policystrict-origin-when-cross-originGoodControl how much referrer information should be included with requests.

Click to learn more...
Clear-Site-Data—GoodControl the data stored by a client browser for their origins.

Click to learn more...
X-Permitted-Cross-Domain-Policies—GoodControl whether a web client such as Adobe Flash Player or Adobe Acrobat has permission to handle data across domains.

Click to learn more...
Permissions-Policy—NewAllow and deny the use of browser features in a document or iframe.

Click to learn more...
Cross-Origin-Embedder-Policy—NewConfigure embedding cross-origin resources into the document.

Click to learn more...
Cross-Origin-Opener-Policy—NewEnsure a top-level document does not share a browsing context group with cross-origin documents.

Click to learn more...
Cross-Origin-Resource-Policy—NewRequest that the browser blocks no-cors cross-origin/cross-site requests to the given resource.

Click to learn more...
X-XSS-Protection1; mode=blockDeprecatedDeprecated. Stops pages from loading when they detect reflected cross-site scripting (XSS) attacks.

Click to learn more...
Feature-Policygeolocation *DeprecatedDeprecated. Replaced by the Permissions-Policy header.

Click to learn more...
Expect-CTmax-age=300DeprecatedDeprecated. Opt in to reporting and/or enforcement of Certificate Transparency requirements.

Click to learn more...
Public-Key-Pins—DeprecatedDeprecated. Allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates.

Click to learn more...

Security Violations · 0 found

Certificates · 14 found

SubjectIssue dateExpiry date
careers.fedex.comMay 22, 2024, 00:00:00May 22, 2025, 23:59:59
*.cloudfront.netJul 30, 2024, 00:00:00Jul 3, 2025, 23:59:59
cdn.sites.paradox.aiApr 5, 2024, 00:00:00May 4, 2025, 23:59:59
*.google-analytics.comOct 7, 2024, 08:23:31Dec 30, 2024, 08:23:30
cdnjs.cloudflare.comSep 28, 2024, 05:35:05Dec 27, 2024, 05:35:04
*.simpli.fiNov 7, 2023, 00:00:00Dec 7, 2024, 23:59:59
quantserve.comOct 22, 2024, 13:40:31Jan 20, 2025, 13:40:30
*.tiktok.comJul 15, 2024, 00:00:00Jul 15, 2025, 23:59:59
www.bing.comSep 16, 2024, 23:16:19Mar 15, 2025, 23:16:19
fedex.paradox.aiMay 8, 2024, 00:00:00Jun 6, 2025, 23:59:59