capitalbikeshare.com

.com crawl

First seen 2026-04-22 · Last seen 2026-05-19 · ok HTTP/1.1 200 2304 ms crawled 2026-05-16

US · 52.54.211.120 · AS14618 Amazon.com, Inc.

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Description: The Metro DC area’s bikeshare system. Find a bike, get pricing, membership options, and more.
Language: en-US
Canonical: https://capitalbikeshare.com/

Open Graph

url: https://capitalbikeshare.com/
title: Capital Bikeshare DC
description: The Metro DC area’s bikeshare system. Find a bike, get pricing, membership options, and more.

Technology

Server: envoy-iad
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (5)

cdn.lyft.com×30
lyft-lastmile-production-iad.s3.amazonaws.com×16
images.ctfassets.net×14
www.lyft.com×2
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2009-12-08

Expires

2026-12-08 201 days left

Updated

2025-12-09

Name servers

ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

DNS records live

NS

ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
20 aspmx2.googlemail.com
30 aspmx3.googlemail.com

Verified for

Google

Email authentication weak

SPF: v=spf1 include:_spf.google.com include:spf.constantcontact.com include:spf.mandrillapp.com include:alta.bike include:spf.8d.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M01

from 2025-11-12 to 2026-12-12

Expires in 205 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://capitalbikeshare.com/

present

x-frame-options

findings

missing HSTS
missing Content Security Policy
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: DENY