bikewale.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- CloudFront
- CMS
- Gatsby
- Analytics
-
- Google Analytics
- Google Tag Manager
- Microsoft Clarity
- Ads
-
- Google AdSense
- Google Ads (DoubleClick)
- Meta Pixel
Third-party hosts loaded (22)
- imgd.aeplcdn.com×193
- stb.aeplcdn.com×3
- stc.aeplcdn.com×3
- www.googletagmanager.com×3
- www.gstatic.com×2
- adservice.google.co.in×1
- connect.facebook.net×1
- googleads.g.doubleclick.net×1
- pagead2.googlesyndication.com×1
- sb.scorecardresearch.com×1
- script.crazyegg.com×1
- securepubads.g.doubleclick.net×1
- stats.g.doubleclick.net×1
- survey.survicate.com×1
- surveys-static.survicate.com×1
- tpc.googlesyndication.com×1
- www.clarity.ms×1
- www.facebook.com×1
- www.google-analytics.com×1
- www.google.co.in×1
- www.google.com×1
- www.googletagservices.com×1
Social
Registration
- Registrar
- Amazon Registrar, Inc.
- Created
- 2006-02-10
- Expires
- 2034-02-10 2823 days left
- Updated
- 2026-05-16
- Name servers
-
- ns-1303.awsdns-34.org
- ns-1558.awsdns-02.co.uk
- ns-492.awsdns-61.com
- ns-858.awsdns-43.net
DNS records live
- NS
-
- ns-1303.awsdns-34.org
- ns-1558.awsdns-02.co.uk
- ns-492.awsdns-61.com
- ns-858.awsdns-43.net
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
google-site-verification=UryvcizAEU3LjVbKAI2iNQcNb3N1p1Ut7DkxJtRoVHogoogle-site-verification=uHmJkvnhfRxPk38YBc3JsKbxcgcC4H1Fj7eG7Uum4lcgoogle-site-verification=v89fYAtjGZacpAgGLjb4mgseq0z4JLkG1rr2kVZrets
Email authentication partial
- SPF
-
v=spf1 ip4:35.154.189.89 include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=none;rua=mailto:dmarc@carwale.compolicy: none (monitoring only) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1ia+IcE4Ya3REtMn0g6D+CYdf1C2DCqVDp1G1OX6cNJ+bFm+ub6g4AOWrnAMmcGBxfDUmgDlMOFC/V6/lmx…
selectors probed - google:
Certificate (current)
Amazon RSA 2048 M02
Expires in 91 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
deny- permissions-policy
camera=(self http://*.carwale.com https://*.carwale.com https://*.bikewale.com https://*.cartrade.com https://*.mobilityoutlook.com), microphone=(self http://*.carwale.com https://*.carwale.com https://*.bikewale.com https://*.cartrade.com https://*.mobilityoutlook.com), otp-credentials=(self https://*.carwale.com https://*.bikewale.com)- x-content-type-options
nosniff- content-security-policy
style-src * blob: 'unsafe-inline'; script-src * blob: 'unsafe-inline' 'unsafe-eval'; worker-src * blob:; frame-ancestors 'self' http://*.carwale.com https://*.carwale.com https://*.bikewale.com https://*.cartrade.com https://*.lead2retail.in https://*.autobiz.in https://lms.bgauss.com https://*.cleverwebserver.com; report-uri /api/exceptions/;- strict-transport-security
max-age=31536000; includeSubDomains