coldspringdesign.com

.com crawl

First seen 2026-04-23 · Last seen 2026-05-18 · ok HTTP/1.1 200 8137 ms crawled 2026-05-17

US · 172.67.195.186 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Cold Spring Design | Massachusetts Web Design & Hosting Company
Description: At Cold Spring, our experienced, local team creates sites that are customized to your business, your market, and your budget.
Language: en-US
Generator: WordPress 6.9.4
Canonical: https://www.coldspringdesign.com/

Open Graph

url: https://www.coldspringdesign.com/
title: Cold Spring Design | Massachusetts Web Design & Hosting Company
locale: en_US
site name: Cold Spring Design
description: At Cold Spring, our experienced, local team creates sites that are customized to your business, your market, and your budget.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (4)

cdn-coldspringdesign.b-cdn.net×25
use.typekit.net×2
coldspringdesign.wufoo.com×1
www.googletagmanager.com×1

Contact

Phone

5088655191

Registration

Registrar

GoDaddy.com, LLC

Created

2001-03-07

Expires

2027-03-07 291 days left

Updated

2026-03-08

Name servers

bart.ns.cloudflare.com
lisa.ns.cloudflare.com

DNS records live

NS

bart.ns.cloudflare.com
lisa.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=4HE1xv7ezngjUYUwwbnzoW8aIZ_K6l0AO3UT4poLmdI

Email authentication strong

SPF

v=spf1 +a +mx +ip4:67.231.246.58 include:servers.mcsv.net include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:info@coldspringdesign.com; pct=100; adkim=s; aspf=s

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv6kecBof8YE15k1e+PsbVofrawix7zwfiYGEnp3xceNHTKj2+H2tLI2H5jVF/G61qILkjNjVnCJLk…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-04-16 to 2026-07-15

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.coldspringdesign.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade
x-frame-options: sameorigin, SAMEORIGIN
permissions-policy: geolocation=*, midi=(), sync-xhr=(self "https://coldspringdesign.com" "https://www.coldspringdesign.com"), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self "https://coldspringdesign.com" "https://www.coldspringdesign.com" )
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: *.www.coldspringdesign.com, block-all-mixed-content
strict-transport-security: max-age=31536000, max-age=31536000