bajabound.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-20 · ok HTTP/1.1 200 2968 ms crawled 2026-05-07

US · 34.98.110.147 · AS396982 Google LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Baja Bound | The Easiest Mexican Auto Insurance Online
Description: The easiest way to buy Mexican insurance! Get a policy in minutes from our easy to use website. We offer great rates on Mexican insurance for cars, trucks, SUV's, motorcycles, RV's, camper vans and boats.
Language: en
Canonical: https://www.bajabound.com/

Open Graph

url: https://www.bajabound.com/
title: Baja Bound | The Easiest Mexican Auto Insurance Online
site name: Baja Bound Insurance Services
description: The easiest way to buy Mexican insurance! Get a policy in minutes from our easy to use website. We offer great rates on Mexican insurance for cars, trucks, SUV's, motorcycles, RV's, camper vans and boats.

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (4)

cdn.jsdelivr.net×2
kit.fontawesome.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Squarespace Domains II LLC

Created

1999-01-02

Expires

2027-01-02 226 days left

Updated

2025-12-18

Name servers

ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com

DNS records live

NS

ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com

MX

Show 7 MX records

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
10 aspmx4.googlemail.com
10 aspmx5.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

asv_domain=134e0e2146c9781f02ebaba7c4d684fd

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:sendgrid.net ~all

softfail (~all)

DMARC

v=DMARC1;p=none;

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTTZ9j25CIhJOeUrUoNQkLWKQop4vBmuBUJMBW6jQ9PeKnSrM+zrNcn4LJegNk5MkeL5J5Iwsxz07e…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGl2o3c6bcL66U5hzcNvy3++9eT1SYqD1LCF5J7Aizui095Vycl89p/niNzgSo+ueioeaW67EtqlKb0D42…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC57ne3aaldG+JXIxKJrX7ddJ72nZ02ZmwozSAhWGOPg9YaiKKlxIUsrerVIKH5p+hd8z40lZZ6jx53qFn2UU5nE9…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

WR3

from 2026-03-22 to 2026-06-20

Expires in 31 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.bajabound.com/

present

strict-transport-security
content-security-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: object-src 'none'; base-uri 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'nonce-9OKV7WUIJ1' https://*.bajabound.com https://*.googleusercontent.com https://api.mapbox.com https://api.tiles.mapbox.com https://cdn.bajabound.com https://maps.google.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://pro.fontawesome.com https://kit.fontawesome.com https://*.googletagmanager.com https://*.paypalobjects.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.paypal.com https://*.facebook.net https://bam.nr-data.net https://js-agent.newrelic.com
strict-transport-security: max-age=31536000