globalwaterintel.com

HTML metadata

Title: GWI
Language: en

Technology

CDN: Amazon CloudFront
Server: AmazonS3

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×3
fonts.gstatic.com×1
www.googletagmanager.com×1

Registration

Registrar

DreamHost, LLC

Created

2000-04-11

Expires

2027-04-11 326 days left

Updated

2026-03-11

Name servers

ns1.dreamhost.com
ns2.dreamhost.com
ns3.dreamhost.com

DNS records live

NS

ns1.dreamhost.com
ns2.dreamhost.com
ns3.dreamhost.com

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 7 TXT records

sophos-domain-verification=eab3dae7f552dd9d2d4776842b6360349d8ba5d754adabccef9262534ce780c1
google-site-verification=DEp3UDkqCCf-ndbM_GUgLTAgFIaIvuxyPVprN-UqDBU
google-site-verification=RrXk4k0O4pfiPinG4QpS0NvxAxSZEaysNOsftOJvgeU
atlassian-domain-verification=sXaO9M0EMpT195HY4XEFiJ7jeha1x1W51HuXGmK8GV8M8C9JVjligaGmOzjMBI1n
google-site-verification=DliyNsz37LBJnfmF3KgYU-bEE4PRM-SXXqV15104Mho
google-site-verification=Fv_wucw7zLYc0L0jqA6zZ_Us__eQTQ1RlnWAMDYD_w0
mandrill_verify.YLsH--BhpADYaGbGOXhx-w

Email authentication strong

SPF

v=spf1 include:eu._netblocks.mimecast.com include:amazonses.com include:gwispf.smtp.com include:spf.mandrillapp.com include:mail.zendesk.com include:email.prnewswire.com include:gatormail.co.uk ip4:86.188.245.75/32 ip4:82.148.56.57/32 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:re+xqgytsa0txc@dmarc.postmarkapp.com; ruf=mailto:dmarcreports@globalwaterintel.com; sp=none; aspf=r;

policy: quarantine · sp=none

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVO6Ux4I/Ic0nBnpV7gAZ70LkHKXNTjgtq/RW4olVsnn3n6RSZqQIyze8IcsNf4T96fbo16slB1X0NtkP…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxeNI6N5nqfW+p6ldo5QN6YQ1Kss54nBp2AD0+7WcQ/tsw47fj5fdixT/olsN4ZA+lGx0fTqyhJ1zOyXEiiv1mD8…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-04-14 to 2026-10-29

Expires in 162 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://globalwaterintel.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' api.globalwaterintel.com cdn.segment.com api.segment.io *.auth0.com www.googletagmanager.com *.google-analytics.com api-iam.intercom.io px.ads.linkedin.com wss://*.intercom.io vc.hotjar.io wss://ws.hotjar.com content.hotjar.io metrics.hotjar.io in.hotjar.com pagead2.googlesyndication.com *.analytics.google.com www.google.com/pagead/ www.google.co.uk/ads/ www.google.com/ccm/ stats.g.doubleclick.net googleads.g.doubleclick.net static.websites.data-crypt.com api-websites.data-crypt.com; img-src 'self' https://flagcdn.com gwi-live-strapi-media-library.s3.eu-west-2.amazonaws.com secure.gravatar.com s.gravatar.com i0.wp.com i1.wp.com i2.wp.com cdn.auth0.com www.googletagmanager.com d26zrrb868k3tz.cloudfront.net www.globalwaterintel.com www.test-globalwaterintel.com js.intercomcdn.com static.intercomassets.com px.ads.linkedin.com i.vimeocdn.com i.ytimg.com www.google.co.uk/ads/ data: blob:; script-src 'self' 'unsafe-inline' https://cdn.segment.com https:
strict-transport-security: max-age=31536000; includeSubDomains