coastalbayapts.com

.com crawl

First seen 2026-05-04 · Last seen 2026-05-11 · ok HTTP/1.1 200 2242 ms crawled 2026-05-11

US · 40.114.4.103 · AS8075 Microsoft Corporation

Reputation 92/100 no dmarc policy

sector real estate type homepage

HTML metadata

Title: Coastal Bay | Jacksonville Apartments for Rent
Description: See all that awaits at our Jacksonville apartments for rent and find your new home. Contact us at Coastal Bay Apartments today for more information!
Language: en

Open Graph

url: https://www.coastalbayapts.com/
title: Coastal Bay | Jacksonville Apartments for Rent
description: See all that awaits at our Jacksonville apartments for rent and find your new home. Contact us at Coastal Bay Apartments today for more information!

Technology

Server: Spherexx

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

sxxweb8cdn.cachefly.net×40
fonts.googleapis.com×2
www.googletagmanager.com×1

Social

Contact

Phone

9048309308

Address

2001 Hodges Blvd, 32224, Jacksonville, FL, USA

Registration

Registrar

GoDaddy.com, LLC

Created

2023-09-13

Expires

2026-09-13 116 days left

Updated

2025-08-28

Name servers

ns1.spherexx.com
ns2.spherexx.com
ns3.spherexx.com

DNS records live

NS

ns1.spherexx.com
ns2.spherexx.com
ns3.spherexx.com

MX

10 mx1.emailsrvr.com
20 mx2.emailsrvr.com

TXT

google-site-verification=cLD88my-FWBrcpMUWfbRzG6mFH6hQ9zf1KBYx9VCgAU

Email authentication weak

SPF: v=spf1 include:spherexx.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2025-12-29 to 2027-01-30

Expires in 256 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.coastalbayapts.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval' 'self';
strict-transport-security: max-age=31536000; includeSubDomains