carolinaona.com

.com crawl

First seen 2026-05-08 · Last seen 2026-05-15 · ok HTTP/1.1 200 922 ms crawled 2026-05-15

US · 190.92.170.188 · AS14670 WHG Hosting Services Ltd

Reputation 69/100 listed in spam blocklist dmarc monitor-only

sector health type homepage

HTML metadata

Title: Orthopedic and Neurosurgical Practices in South Carolina | CONA
Description: CONA Orthopedic and neurosurgical clinics in South Carolina offer a synergistic approach for the spine, skeletal system, and nervous system.
Language: en-US
Generator: Divi v.4.27.4
Canonical: https://carolinaona.com/

Open Graph

url: https://carolinaona.com/
title: Orthopedic and Neurosurgical Practices in South Carolina | CONA
locale: en_US
site name: Carolina Orthopedic & Neurosurgical Associates
description: CONA Orthopedic and neurosurgical clinics in South Carolina offer a synergistic approach for the spine, skeletal system, and nervous system.
updated time: 2026-04-03T06:48:59-04:00

Technology

Server: Apache
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (9)

www.googletagmanager.com×4
fonts.gstatic.com×2
iframe.socialclimb.com×2
p.usestyle.ai×2
www.google.com×2
fonts.googleapis.com×1
medchatapp.com×1
tag.brandcdn.com×1
tag.simpli.fi×1

Social

Contact

Phone

864-583-2662

Address

1330 Boiling Springs Rd, Ste 1600, 29303, Spartanburg, South Carolina

Registration

Registrar

Network Solutions, LLC

Created

2016-03-08

Expires

2027-03-08 291 days left

Updated

2026-01-07

Name servers

ns75.worldnic.com
ns76.worldnic.com

DNS records live

NS

ns75.worldnic.com
ns76.worldnic.com

MX

0 carolinaona-com.mail.protection.outlook.com

Verified for

Brevo

Email authentication partial

SPF

v=spf1 ip4:190.92.170.188 include:spf.protection.outlook.com include:47733274.spf10.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R13

from 2026-04-03 to 2026-07-02

Expires in 42 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://carolinaona.com/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src * data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
content-security-policy-report-only: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https: data:; object-src 'none'; base-uri 'self'; form-action 'self';