codespeed.com
HTML metadata
Technology
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (2)
- fonts.googleapis.com×2
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- 1024 W Railroad Aly, 99201, Spokane, WA, US
Registration
- Registrar
- eNom, LLC
- Created
- 2013-09-21
- Expires
- 2026-09-21 124 days left
- Updated
- 2025-08-21
- Name servers
-
- ns-1025.awsdns-00.org
- ns-1631.awsdns-11.co.uk
- ns-61.awsdns-07.com
- ns-624.awsdns-14.net
DNS records live
- NS
-
- ns-1025.awsdns-00.org
- ns-1631.awsdns-11.co.uk
- ns-61.awsdns-07.com
- ns-624.awsdns-14.net
- MX
-
- 10 inbound-smtp.us-west-2.amazonaws.com
- TXT
-
google-site-verification=EpK6vunDumn4votMrreAryLjBgRhO_wh6Eywb-McaKw
Email authentication strong
- SPF
-
v=spf1 include:amazonses.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=quarantine;pct=100;fo=1policy: quarantine - DKIM
- no key found at common selectors
Certificate (current)
Amazon RSA 2048 M01
Expires in 171 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self';base-uri 'self';font-src 'self' data: *.gstatic.com *.googleapis.com *.crisp.chat *.typekit.net;form-action 'self' *.paypal.com;frame-ancestors 'self';frame-src 'self' *.google.com *.youtube.com *.vimeo.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com;img-src 'self' data: blob: https://cdn.codespeed.com *.spokanedns.com place-hold.it *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.ytimg.com *.youtube.com vimeo.com *.vimeo.com *.facebook.com *.facebook.net *.paypalobjects.com *.paypal.com *.crisp.chat *.bing.com *.typekit.net;object-src 'none';script-src 'self' data: 'unsafe-inline' https://cdn.codespeed.com *.spokanedns.com place-hold.it *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.ytimg.com *.youtube.com vimeo.com *.vimeo.com *.facebook.com *.facebook.net *.paypalobjects.- strict-transport-security
max-age=31536000; includeSubDomains- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
same-origin