bikedekho.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- CloudFront
- Analytics
-
- Google Analytics
- Google Tag Manager
- Ads
-
- Google Ads (DoubleClick)
- Meta Pixel
Third-party hosts loaded (6)
- com.girnarsoft.bikedekho×2
- www.googletagmanager.com×2
- api.connecto.io×1
- connect.facebook.net×1
- securepubads.g.doubleclick.net×1
- www.google-analytics.com×1
Social
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2009-07-31
- Expires
- 2030-07-31 1534 days left
- Updated
- 2025-01-03
- Name servers
-
- ns-1499.awsdns-59.org
- ns-1764.awsdns-28.co.uk
- ns-194.awsdns-24.com
- ns-658.awsdns-18.net
DNS records live
- NS
-
- ns-1499.awsdns-59.org
- ns-1764.awsdns-28.co.uk
- ns-194.awsdns-24.com
- ns-658.awsdns-18.net
- MX
-
- 1 aspmx.l.google.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 5 TXT records
google-site-verification=ALvU280XYC6EAJuGfwEFrCQ37Nak-jTG1hLUFdHcBqEgoogle-site-verification=BPFoMOFYHXc-S8Vkq6LhNnIghgJ09j7_sh9hl24fhdYgoogle-site-verification=g2r7ZUU3g7KgvY_2Fq6EjlMaU1yA2zCkBCLqjTN6ciIv=DKIM1; g=*; k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAughYkowNe7yFZ1gtWu4btmliejb2vUoovcJyB9lOPfiasMojrPUiBU2t9S7Ewa45tHHzQpTUSsqLCuXbeiIox4u2PDnYgWT8ZttK7mWAzKzTjsPzNv5HgC5dB2Z9Cmq+Phm9M7boXDtqpmTk+afEdrurx75S7bXzXeLOQ+4PgfDX7nAe3HcyXClB3kgoogle-site-verification=3M3Hd1xPjJ1wTmJPV43huWqxUU5OkZsUuKAHkS46I78
Email authentication strong
- SPF
-
v=spf1 a mx ip4:103.20.212.11 include:_spf.google.com include:amazonses.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarc.rua@bikedekho.com; pct=50policy: quarantine · pct=50 - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCKA7e4gZED4MkyKaDbtt79S1Xdmy2+LlHmsQ/E5nNqBSTjkXTJ4PcdGUq+fT4aAuQCT7uft5a4aF1JMGVmAF…
selectors probed - google:
Certificate (current)
Amazon RSA 2048 M04
Expires in 172 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
style-src * blob: 'unsafe-inline'; script-src * blob: 'unsafe-inline' 'unsafe-eval'; worker-src * blob:; frame-ancestors 'self' https://*.cardekho.com https://*.bikedekho.com https://agent.botsdekho.com https://*.rupyy.com;- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (7)
- apple.com×4
- cardekho.com×4
- facebook.com×4
- google.com×4
- instagram.com×4
- x.com×4
- youtube.com×4