beautybyrach.com — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Beauty by Rach | Medical Spa in California
Description: Beauty by Rach is the nations fastest-growing Medical Spa. Find the location nearest to you in California area. (951) 889-8265
Language: en-US
Generator: HubSpot
Canonical: https://beautybyrach.com/

Open Graph

url: https://beautybyrach.com/
title: Beauty by Rach | Medical Spa in California
locale: en_US
site name: Beauty by Rach
description: Beauty by Rach is the nations fastest-growing Medical Spa. Find the location nearest to you in California area. (951) 889-8265

Technology

CDN: Cloudflare
CMS: WordPress
PHP: 8.4.21
jQuery: 3.7.1

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (6)

api.medspacircle.com×3
fonts.googleapis.com×2
cdn.trustindex.io×1
upload.wikimedia.org×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Phone

9518898265

Registration

Registrar

NameSilo, LLC

Created

2022-08-26

Expires

2026-08-26 85 days left

Updated

2026-03-16

Name servers

evan.ns.cloudflare.com
gail.ns.cloudflare.com

DNS records live

NS

evan.ns.cloudflare.com
gail.ns.cloudflare.com

MX

10 mxa.mailgun.org
10 mxb.mailgun.org

TXT

"v=spf1 include:_spf.mlsend.com +a +mx +ip4:84.75.194.3 include:ses.beautybyrach.com include:mailgun.org ~all" "facebook-domain-verification=a9gr6ifkdtx8n3lh935kgw9a2s15sn" "ca3-b3cabc185de94c91a9b731b28f06c0bc" "google-site-verification=kxxVk5bzjMrnQ8u7PMD199TpB7yVrkrrxXbS_dHP2nw"

Verified for

Google

Email authentication weak

SPF

not published

DMARC

not published

DKIM

default: "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr20wbSMsIL+Z04xNt3i2qcVdQdeLm1eEhsCQtoR0nqpA92P8OOF/KzqkiPC8ka4jWvewkJL4y1vm…

selectors probed

Certificate (current)

E8

from 2026-05-14 to 2026-08-12

Expires in 72 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://beautybyrach.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), camera=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.clarity.ms https://js.hsforms.net https://*.hubspot.com https://*.cloudflare.com https://challenges.cloudflare.com https://cdn.buttonizer.io https://connect.facebook.net https://api.medspacircle.com https://cdn.trustindex.io https://static.cloudflareinsights.com https://analytics.tiktok.com https://cdn.jsdelivr.net https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.cloudflare.com https://js.hsforms.net; font-src 'self' data: https://fonts.gstatic.com https://*.cloudflare.com https://*.trustindex.io; img-src 'self' data: blob: https:; frame-src 'self' https://*.youtube.com https://*.youtube-nocookie.com https://*.google.com https://app.hubspot.com https://js.hsforms.net https://challenges.cloudflare.com; connect-src 'self' https://*.google-analytics.com http
strict-transport-security: max-age=31536000; includeSubDomains

Links to (7)

Linked from (1)

medspacircle.com×1