aquasana.com

HTML metadata

Title: Aquasana Water Filters | Whole House Water Filtration Systems
Description: Enjoy clean and great-tasting water straight from your faucet! Aquasana offers drinking water filters, shower filters & whole house systems at an amazing price.
Language: en-US
Canonical: https://www.aquasana.com/

Open Graph

url: https://www.aquasana.com/

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights
Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (10)

fonts.googleapis.com×2
js.braintreegateway.com×2
static.cloudflareinsights.com×2
aosmithna.my.site.com×1
cdn.cquotient.com×1
fonts.gstatic.com×1
kit.fontawesome.com×1
www.google.com×1
www.googletagmanager.com×1
www.paypalobjects.com×1

Social

Contact

Phone

8666626885

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1999-07-09

Expires

2028-07-09 781 days left

Updated

2026-03-10

Name servers

graham.ns.cloudflare.com
kinsley.ns.cloudflare.com

DNS records live

NS

graham.ns.cloudflare.com
kinsley.ns.cloudflare.com

MX

10 mxa-00587901.gslb.pphosted.com
20 mxb-00587901.gslb.pphosted.com

TXT

Show 10 TXT records

google-site-verification=33lxW_b73fqiaoi4TvmSIO3qgx5eDjMdcmYl5Rcy-BI
google-site-verification=kNGXUD-ufAmNBlHTW_j9eHEfbtkGItzWXBQIpZ3bL5E
miro-verification=520477bc83dbd4e1987732a4d785fb6e78c5aca2
t0r07f25o6b27dbml2gba37ql4
1e6mte578tch8g9vj7o2d1j3qj
8dgryzxv9ptrnhfkm8vlvkd0vl3klbh1
atlassian-domain-verification=Rwk/ZCD/OltdiBvMnmHXGtyIvSSppAx2F8cXhDRJ0EcxOSo0XfFmKTEFOrWmFZ54
b4c3eflaj2ha9q89316u081ecg
ca3-e9b155549fd34500a0f91d347b61c6b8
google-site-verification=-6bJiZ320FvFfOwCKiS9ytmzA7Q34cfi53TeSA9qKDs

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:b957ed0bdeaa44de849515b577648abc@dmarc-reports.cloudflare.net,mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yc5WrcX6V0sel7XHWSywqzu3u1947z4ahBel9lRDUjbWhVF/ufcLREZU7S3uqTwtKlQRgnMq6XcaI…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHEEAeZkpmcvJ4/JvW5geeh2ly8CL40ZepireQmSRaJVt9m0DTh+UWzvmgqOTKfQRsgzCz/GqK4VySe+YC…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMqcEZsFvg9em6UueFxHTxjoVYLp6CuDDFt+uaGdEKPP65QUkADN3hbsQDHZcBhpwxifQtDeaslKAZyxJcUPblOd…

selectors probed

Certificate (current)

Corporation Service Company RSA DV SSL CA 2

from 2026-05-07 to 2026-11-22

Expires in 186 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.aquasana.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; img-src * data: blob: https: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; script-src * 'unsafe-inline' 'unsafe-eval' https: blob: *.visualwebsiteoptimizer.com app.vwo.com; style-src * 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com; connect-src * https: *.visualwebsiteoptimizer.com app.vwo.com; frame-src * https: *.visualwebsiteoptimizer.com app.vwo.com; child-src * blob: https: *.visualwebsiteoptimizer.com app.vwo.com; worker-src 'self' blob:; font-src * data: https:;
strict-transport-security: max-age=31536000; includeSubDomains; preload

Links to (7)

Linked from (1)

henryplumbingco.com×2