cervelo.com
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Next.js
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (2)
- dg4y5y8rf5b7j.cloudfront.net×1
- use.typekit.net×1
Social
Registration
- Registrar
- easyDNS Technologies Inc.
- Created
- 1997-05-16
- Expires
- 2032-05-17 2190 days left
- Updated
- 2023-02-17
- Name servers
-
- dns1.easydns.com
- dns2.easydns.net
- dns3.easydns.ca
DNS records live
- NS
-
- dns1.easydns.com
- dns2.easydns.net
- dns3.easydns.org
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 20 TXT records
google-site-verification=PpjEWYNMYQPd34aLcnxJxJq0RtFnftfiBI1_8KEqjA0smartsheet-site-validation=B4o5Sb8gEuDrlIUT68TwcggJHSvwnsVgp76qpkju96s60sctedl48hap3cnbf9xgntsjjp0rzjv4hxzdh4nvy10s48google-site-verification=y0LOiXl6ZnbhMq7y6hvaca_T1_AunP_Aq6Q0S-7G4CIgoogle-site-verification=DENNl0gjZaZUSN1hHqfFJu9FOqYlNUQu5OZugrUareMv=DMARC1; p=reject; fo=1; pct=100; ri=3600; rua=mailto:pon@rua.agari.com,mailto:dmarc@pon.com; ruf=mailto:pon@ruf.agari.com_globalsign-domain-verification=mybKJPj92b9Qv-xtWW1I8pa3h5EOpVuDQ62tzeVleofacebook-domain-verification=6e0wu2gdrg7peqmsq8b8o5lukeq6yqgoogle-site-verification=l0dAUczc7MXMItA80ONx3YX1RSAfG7WE_4ntKiLFKoEMS=F2A495E6D7953E2F25BB29E07B63214B78C22459q9d2u9r3amucrebb5unlccjgrtanthropic-domain-verification-sn5gap=W8cwGty8iUgxNfF4DB8OPBdecppcs0c46m2esc546hk97g2ej37apple-domain-verification=ObfJA4ozECLksgAOdnstg86suojjhvecop2egjbn96google-site-verification=pe8aRqACebA5Av0hVDjhqd_ftILr3T44DaMbMZqlHY4MS=ms85912147google-site-verification=5thjR5_lWM7Uo5YuRY87wuTxb-zF-hbwzlPlMpvxFlUatlassian-domain-verification=4qJEYqfc/WXQpDYwTxfoR539snyTxaKomlf73tKQW4oTqfJmsLL8IRKlYqlGfBTb
Email authentication strong
- SPF
-
v=spf1 include:_spf.google.com include:sendgrid.net include:1660224.spf01.hubspotemail.net ip4:207.126.144.0/20 a:beanstream.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; pct=100; fo=1; ri=3600; rua=mailto:053718d2@inbox.eu.redsift.cloud,mailto:pon@rua.agari.com,mailto:dmarc@pon.com; ruf=mailto:053718d2@inbox.eu.redsift.cloud,mailto:pon@ruf.agari.compolicy: reject (enforced) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq70HG9L7GnHRj/7mkuXL+S57fvFNJj3oid0ZB5PcIqzHuECBOtAI16JBe5SC/Q7I7EqFBy5lcLk+CS… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPHKZJndrpM6lzAnhk5wycqy0VGVOLr9+4wvxoqVI43amMSTOpblDcROxLhunDT+FXXUE0CoinOalGZKKi… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQs5gOZtp8XIM17UQPm3nVF1C4ao67hFQWm52C25E+HiWVgovk30WIM0qbW+UYYpd5FY2jkGFpsxD96tiVfKEpth…
selectors probed - google:
Certificate (current)
R13
Expires in 57 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; font-src * data:; img-src * self data:; script-src * blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; connect-src *; media-src blob: https://dg4y5y8rf5b7j.cloudfront.net/; frame-src https:; frame-ancestors 'self';- strict-transport-security
max-age=63072000