communitytransit.org
HTML metadata
Technology
- Server
- Microsoft-IIS
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (5)
- translate.google.com×1
- use.typekit.net×1
- www.facebook.com×1
- www.google.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
Registration
- Registrar
- eNom, LLC
- Created
- 2002-03-25
- Expires
- 2027-03-25 309 days left
- Updated
- 2026-03-25
- Name servers
-
- dns1.name-services.com
- dns2.name-services.com
- dns3.name-services.com
- dns4.name-services.com
- dns5.name-services.com
DNS records live
- NS
-
- dns1.name-services.com
- dns2.name-services.com
- dns3.name-services.com
- dns4.name-services.com
- dns5.name-services.com
- MX
-
- 10 d166129a.ess.barracudanetworks.com
- 20 d166129b.ess.barracudanetworks.com
- TXT
-
Show 4 TXT records
MS=ms97753910facebook-domain-verification=gfnrjv6ww347b9mugq6m49zxy67abkcommtrans-production.azurewebsites.netgoogle-site-verification=KMw8CwmmUaluPeIW7WthfUnlexunZqcjAHAgbbzFfws
Email authentication weak
- SPF
-
v=spf1 mx ip4:206.208.64.12 ip4:208.185.229.0/24 ip4:208.185.235.0/24 ip4:148.59.108.0/23 ip4:148.59.106.0/23 include:spf.dynect.net include:emailus.freshservice.com include:spf.protection.outlook.com -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
RapidSSL TLS RSA CA G1
Expires in 69 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js cdnjs.cloudflare.com translate.google.com https://commtrans-production-redesign-preview.azurewebsites.net https://commtrans-production.azurewebsites.net https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com https://unpkg.com/ https://z.moatads.com https://*.mouseflow.com https://*.vimeo.com https://*.doubleclick.net https://*.brazenconnect.com https://*.google-analytics.com https://analytics.google.com https://*.googletagmanager.com https://*.govdelivery.com https://*.tvsquared.com https://api.mapbox.com https://*.formstack.com https://js.stripe.com https://www.cognitoforms.co- strict-transport-security
max-age=31536000; includeSubDomains