conta.com

HTML metadata

Title

Free invoicing software | Online billing | Free app | Conta

Description

Conta is free invoice software for businesses, freelancers, contractors and self-employed. 100% free and with mobile app. Create invoices now!

Language

en

Canonical

https://conta.com/

Translations

en

Open Graph

url: https://conta.com/
title: Free invoicing software | Online billing | Free app | Conta
locale: en_US
site name: Conta
description: Conta is free invoice software for businesses, freelancers, contractors and self-employed. 100% free and with mobile app. Create invoices now!

Technology

CDN: Cloudflare
CMS: WordPress
Stack: PHP

Analytics

Google Analytics
Google Tag Manager

Ads

Google Ads (DoubleClick)
Meta Pixel

Social widgets

YouTube Embed

Third-party hosts loaded (9)

cdn.jsdelivr.net×2
www.googletagmanager.com×2
api.privacy.enkle.re×1
connect.facebook.net×1
googleads.g.doubleclick.net×1
stats.g.doubleclick.net×1
www.google-analytics.com×1
www.google.com×1
www.youtube.com×1

Social

Registration

Registrar

Name SRS AB

Created

2003-10-16

Expires

2026-10-16 135 days left

Updated

2025-08-04

Name servers

dana.ns.cloudflare.com
walt.ns.cloudflare.com

DNS records live

NS

dana.ns.cloudflare.com
walt.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google

Email authentication strong

SPF: v=spf1 include:_spf.google.com include:_spf.online.superoffice.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; rua=mailto:re+oxtbrlrca2x@dmarc.postmarkapp.com; sp=reject; aspf=r;
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-26 to 2026-08-24

Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://conta.com/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: sameorigin
permissions-policy: accelerometer=(), camera=(), fullscreen=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=(), usb=()
x-content-type-options: nosniff
strict-transport-security: max-age=15768000; includeSubdomains; preload, max-age=15768000