goaheadtours.com
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (6)
- a-us.storyblok.com×49
- a.storyblok.com×27
- a.omappapi.com×1
- seal-boston.bbb.org×1
- us-central.dx.dialpad.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- 2 Education Cir, 02141, Cambridge, MA, US
Registration
- Registrar
- CSC Corporate Domains, Inc.
- Created
- 2000-05-03
- Expires
- 2027-05-03 349 days left
- Updated
- 2026-04-29
- Name servers
-
- kanye.ns.cloudflare.com
- robin.ns.cloudflare.com
DNS records live
- NS
-
- kanye.ns.cloudflare.com
- robin.ns.cloudflare.com
- MX
-
- 0 goaheadtours-com.mail.protection.outlook.com
- TXT
-
Show 4 TXT records
_5nz38z9da7y1de7x5k90zibbwu8jqrpgoogle-site-verification=2_Gt3w0v1t_OfJh4Nlat17rrWX5SS6MIxBtRcpuzYLkgoogle-site-verification=RaXCCLZOcgTVzuc7vrcozgUJ8sr6ync6owoifxnVqQsMS=ms46279347
Email authentication strong
- SPF
-
v=spf1 a mx ip4:80.68.100.211 a:eftours.com a:ef.com a:hult.edu include:sendgrid.net include:mail.zendesk.com include:spf.protection.outlook.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; pct=100; fo=1; ri=3600; rua=mailto:27109e03@inbox.ondmarc.com; ruf=mailto:27109e03@inbox.ondmarc.com;policy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCc77yA0VtRcciIbnNjHgZSMsZhChTYqKq98TnLSxPA986uk/eRtp7BJPe4l6wMZooQYSg4AuRFQVSl4rij6b… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1Vs4IKr8N3v2lIn02ISdvM687oxQBmQNYgzN5f3eizZL7HW9OQTlGQbzATrMYvieWW3kh2hOuYRVxB5L5… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmaZOBndsBo843BoEKnl/76v5KGsczxu5aEaol5ng+KvcdLD6RUct+0YfxJwtjnrCngfJWyqI+MDEIm3Wj…
selectors probed - selector1:
Certificate (current)
R12
Expires in 52 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
frame-ancestors 'self' https://app.storyblok.com http://app.storyblok.com/; font-src 'self' https://fonts.gstatic.com https://*.hotjar.com data: https://fast.wistia.net/ https://www.sjwoe.com;- strict-transport-security
max-age=15552000; includeSubDomains; preload