caranddriver.com

HTML metadata

Title

Car and Driver: New Car Reviews, Buying Advice and News

Description

Covering the automotive industry since 1955 with in-depth reviews and analysis, features, auto show reporting, and advice for car owners and buyers.

Language

en-US

Canonical

https://www.caranddriver.com/

Translations

en-us
es-es

Open Graph

title: Car and Driver: New Car Reviews, Buying Advice and News
site name: Car and Driver
description: Covering the auto industry since 1955 with reviews, analysis, and advice for car owners and buyers.

Technology

CMS: Next.js

Cookie consent

OneTrust

Third-party hosts loaded (2)

hips.hearstapps.com×96
cdn.cookielaw.org×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1996-02-24

Expires

2027-02-25 281 days left

Updated

2026-02-21

Name servers

ns-1175.awsdns-18.org
ns-1849.awsdns-39.co.uk
ns-216.awsdns-27.com
ns-535.awsdns-02.net

DNS records live

NS

ns-1175.awsdns-18.org
ns-1849.awsdns-39.co.uk
ns-216.awsdns-27.com
ns-535.awsdns-02.net

MX

10 caranddriver-com.mail.protection.outlook.com

TXT

Show 11 TXT records

ahrefs-site-verification_6883532e061ec21af6132a768ee32e458b48324b61696e9d27f79ee08fbe0755
fastly-domain-delegation-tHoPyhjKot-363395-2021-04-28
google-site-verification: vbzaoK0Ndp7WeL5OagKIIK_W6H6nBlXUyBin_MeTrYg
google-site-verification=EJZMqnaCeXTjO3cSRYwyNYhccUZoCn122sjDWPvi1Zk
google-site-verification=UTqzxHgBWeV09y1BjzjXj_v9qrR2LzUk0PC2-1EM7SE
tollbit-domain-verification=e7734c251403b56302abb77b775abf4a7617da195759db4decc53e381193c148
5e4b49497f674fc2a0d3ad378113a7be
BSI91896679786
MS=ms66363079
Up64ydyDs4I6niHEaErVVIMfYQhwN8y1+GPoX6QGGe8lHlo0Xhb5K7sI4yG8gKUhjP6Ba8z8LXzla8B6EvzIsA==
_globalsign-domain-verification=2wRqY6IrIINLY7B8Qcp-qur9HsiRTO04g4gwsMmFy3

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:sendgrid.net ip4:205.220.176.159 ip4:205.220.164.154 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/AMRqshUWZrdqRXDPNVieEmuwY9iHmwgl8HaUzmoF75Kt3w9M0vlCgiqNYEfFQPG+ih5F6uCmP0al…
smtpapi: TXT k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwf…

selectors probed

Certificate (current)

GlobalSign Atlas R3 DV TLS CA 2026 Q1

from 2026-03-27 to 2026-10-12

Expires in 146 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.caranddriver.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval' https: https://accounts.google.com/gsi/; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: https://accounts.google.com/gsi/client; style-src data: 'unsafe-inline' https: https://accounts.google.com/gsi/style; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob: https://accounts.google.com/gsi/; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; frame-ancestors 'none'
strict-transport-security: max-age=31557600; includeSubDomains