indexo.dev

aven.com

.com crawl

First seen 2026-04-22 · Last seen 2026-05-16 · ok HTTP/1.1 200 6428 ms crawled 2026-05-16

US · 18.165.140.99 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Language
en

Technology

CDN
Amazon CloudFront
Server
AmazonS3
Fonts
  • Adobe Fonts

Third-party hosts loaded (4)

  • use.typekit.net×3
  • p.typekit.net×1
  • widget.trustpilot.com×1
  • www.facebook.com×1

Registration

Registrar
Squarespace Domains II LLC
Created
1995-03-11
Expires
2027-03-12 296 days left
Updated
2026-02-25
Name servers
  • ns-1077.awsdns-06.org
  • ns-1551.awsdns-01.co.uk
  • ns-160.awsdns-20.com
  • ns-869.awsdns-44.net

DNS records live

NS
  • ns-1077.awsdns-06.org
  • ns-1551.awsdns-01.co.uk
  • ns-160.awsdns-20.com
  • ns-869.awsdns-44.net
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
Show 5 TXT records
  • anthropic-domain-verification-jvepdy=VEjamekBZa1au7wUxIILvicqu
  • google-site-verification=9MoroB2Q78qpZji6ODDXkleBbf2PQM6cjKidxGQnMg4
  • linkedin-site-verification=44b87e49-962c-4a92-ac5f-d677034fae3c
  • openai-domain-verification=dv-4gMu8rVoj6ZJFmRZcMmC7woc
  • openai-domain-verification=dv-PcNqlzeFlvyDzBhchqShQom2

Email authentication strong

SPF
v=spf1 include:_spf.google.com include:amazonses.com include:sendgrid.net include:mail.zendesk.com include:servers.mcsv.net include:secureserver.net include:spf.protection.outlook.com include:_spf.salesforce.com ~all
softfail (~all)
DMARC
v=DMARC1;p=quarantine;pct=100;fo=1
policy: quarantine
DKIM
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVdN5XKVNqHAlugF1bxuD+y0J9fZvQibj8Xcf+BGAwOFUEwtA/+TV5VQi5U9W1s8MFx9kAynrDtdB3…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jp5+n5j78O3SwqnwC90gQZhpuAmsBwopBWArlPzQpXCL4CkKOMhSYJeBv9NzCjvKJp1GQOe9NADYzCKGO…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDaJf8QmbtC/GWD3ts+ACgMp4p0dsTVkhrfSpzlBMCwhHLGpPOmZB5/X6RXdq8wBRGo7zGcXV5Ogfd4BsnE8a+v3Q…
selectors probed

Certificate (current)

Amazon RSA 2048 M03
from 2025-08-02 to 2026-08-30
Expires in 102 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.aven.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
default-src 'self' blob: data: https: wss: *.aven.com; child-src https: blob: *.aven.com; img-src 'unsafe-inline' blob: data: *.aven.com https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https: *.aven.com; style-src 'self' 'unsafe-inline' https: *.aven.com; frame-ancestors 'self' https://*.aven.com; upgrade-insecure-requests;
strict-transport-security
max-age=31536000; preload

Linked from (2)