cdmon.com

HTML metadata

Title

Web Hosting and Domain with security & 24/7 Support - cdmon

Description

Discover cdmon, a leading company in domains, web hosting, and more, with top technical support 24/7 and advanced security.

Language

en

Canonical

https://www.cdmon.com/en/

Translations

ca
en
es
it

Technology

CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Email

Phone

Address

C/ Girona 96 local 2, 08380, Malgrat de Mar, Catalonia, ES

Registration

Registrar

10dencehispahard, S.L.

Created

2001-08-12

Expires

2034-08-12 3007 days left

Updated

2025-06-30

Name servers

ns-1123.cdmon.com
ns-1740.cdmon.com
ns-61.cdmon.com
ns-635.cdmon.com

DNS records live

NS

ns-1123.cdmon.com
ns-1740.cdmon.com
ns-61.cdmon.com
ns-635.cdmon.com

MX

10 correo.cdmon.com

TXT

google-site-verification=eyD1ZnfNIgZL_r8m0witG68_rwXKDPbtFtChRnDDmGI
zoho-verification=zb38115099.zmverify.zoho.eu

Email authentication strong

SPF

v=spf1 include:spf.cdmon.com include:one.zoho.eu include:eu.transmail.net include:eu.zcsend.net include:spf.acumbamail.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:auth@cdmon.com

policy: reject (enforced)

DKIM

default: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDw1Io7FLJHX7nQ7WmYa0nNjITCz5uKN1R2Wyuhv4wi3r0zGmdF31S7N+/77fHUgLUcQ2maya2Q3E+aEeKJFoe4dJsLyKw…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
mail: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYCVStWr5+5F6r+vMZ+DHBbSfYoWyAwcTW9p3pY16MnxKaTaO7LtgLkTepWNJDbfpGTuk5kimXnRHPT5DStc…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-04-24 to 2026-11-09

Expires in 174 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.cdmon.com/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; font-src 'self' https://*.zohocdn.com; script-src 'self' 'unsafe-inline' *.zohopublic.eu *.zohocdn.com connect.facebook.net bat.bing.com bat.bing.net static.ads-twitter.com *.googletagmanager.com *.doubleclick.net *.google-analytics.com *.redditstatic.com analytics.tiktok.com pixel.byspotify.com *.googlesyndication.com; style-src 'self' 'unsafe-inline' *.zohopublic.eu *.zohocdn.com *.doubleclick.net; object-src 'none'; base-uri 'self'; connect-src 'self' *.zohopublic.eu *.facebook.com bat.bing.com bat.bing.net *.google-analytics.com *.google.com *.google.es *.doubleclick.net *.trackingplan.com *.googlesyndication.com *.reddit.com *.redditstatic.com analytics.tiktok.com *.tiktokw.us *.googleadservices.com pixels.spotify.com; frame-src 'self' salesiq.zohopublic.eu *.facebook.com *.youtube.com *.youtube-nocookie.com *.doubleclick.net *.googletagmanager.com; img-src 'self' data: hostwordpress.es *.hostwordpress.es *.zohopublic.eu *.zohocdn.com analytics.twitter.com t.co
strict-transport-security: max-age=63072000; includeSubDomains; preload