jamba.com

HTML metadata

Title: Welcome to Jamba | Jamba
Description: Welcome to Jamba! Enjoy delicious smoothies, bowls, juices, and snacks. Order online for delivery or pickup.
Language: en
Canonical: https://www.jamba.com

Open Graph

url: https://www.jamba.com
title: Welcome to Jamba | Jamba
locale: en_US
description: Welcome to Jamba! Enjoy delicious smoothies, bowls, juices, and snacks. Order online for delivery or pickup.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (7)

cdn.optimizely.com×1
images.ctfassets.net×1
resources.digital-cloud-west.medallia.com×1
static.cloudflareinsights.com×1
truyoproductionuscdn.truyo.com×1
www.google.com×1
www.googletagmanager.com×1

Registration

Registrar

MarkMonitor Inc.

Created

1998-08-03

Expires

2026-08-02 75 days left

Updated

2024-07-01

Name servers

ha1.markmonitor.zone
ha2.markmonitor.zone
ha3.markmonitor.zone
ha4.markmonitor.zone

DNS records live

NS

ha1.markmonitor.zone
ha2.markmonitor.zone
ha3.markmonitor.zone
ha4.markmonitor.zone

MX

10 us-smtp-inbound-1.mimecast.com
10 us-smtp-inbound-2.mimecast.com

TXT

Show 14 TXT records

smartsheet-site-validation=FRP9vt1uFWJ_-DvR5uj6_10XUAfV7j4v
box-domain-verification=ef723833912567302b68da96e8a8d1e03329235a7d485b11c94078804dc8b9ff
fb-sitecore-prod-cd-2.azurewebsites.net.
ibmid=4b2ba6ca-9799-472d-8718-583d708fa676
fb-sitecore-prod-cd.azurewebsites.net.
202605060919011vcsd9oc74hqekrgr5q2r342ooh7fbf21qybn3v324r0yxg2zx
google-site-verification=7JWcjkSlMD2CHeE5HLSlSkkbV_fzDgAgQCZGcQvOCpE
duo_sso_verification=xkdUbYQ3H1wr32gddZVdgBOy8ysddEM6VcstX88ghPd6ZnM10MP6KCTAwz98F2r3
atlassian-domain-verification=yL9rtb1CxUM7r6WMcutM27g7Jflrl12h5JZtaipFPr0fnpdIAy0Dwy3X2xh0W0d0
google-site-verification=lP1tpkRlfnEEA1p9xKwMZDkzlU4lak04hoXGov51tIk
UvN/Z096tNfTW19W/+T1AFuilaXQlddJ9JcmYjuXLhxes2YjzJJD5ociG41PfXsTEXrUF/YT9E8xx285V22i7A==
google-site-verification=cHnRKr0y8shpWHxI5BO-NRxzuJNoRcldvxRnodrd2xk
EKFbKI53k8KclEqNOHwT2Ha3KuEm4I1TJQLlwrLWcTyvlU0+VggPG+XUj6csh0970Qa+KScNTkKkAUoSH01BJg==
fb-prod-utility.azurewebsites.net

Email authentication strong

SPF

v=spf1 include:_spf.jamba_com._d.easydmarc.pro ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:16223669ec@rua.easydmarc.us;ruf=mailto:16223669ec@ruf.easydmarc.us;ri=86400;fo=1;

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ZBN5d9JXaDiLafn1ocopQEt7QOK8JCx5rHAl70jg41a5sgXUoBDQ+CI2gqrqUVs6OlGKvD7NDaeD0ZSL…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+x5cIYm6IrjmnuNy/VpplMrSMbAHTixG6fgX3L2oJZdy2np+lCdl4zFzKW454mNbiSHECDbj20AFMl0DsIXdims…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-01-23 to 2027-02-24

Expires in 281 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.jamba.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: no-referrer-when-downgrade
permissions-policy: camera=(self), battery=(self), browsing-topics=(), geolocation=(self)
x-content-type-options: nosniff
content-security-policy: object-src 'self' data:; upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self' https://*.contentful.com; https://truyostagingcdn.truyo.com/ https://maps.googleapis.com/ https://www.google.com/recaptcha/ https://resources.digital-cloud-west.medallia.com/ http://resources.digital-cloud-west.medallia.com/ https://www.googletagmanager.com https://va.vercel-scripts.com/ https://www.gstatic.com/recaptcha/ https://cdn.quantummetric.com/ https://bat.bing.com/ https://sc-static.net/ https://static.hotjar.com/ https://js.adsrvr.org/ https://s.adroll.com/ https://connect.facebook.net/ https://try.abtasty.com/ https://tags.srv.stackadapt.com/ http://rum-static.pingdom.net/ https://analytics.tiktok.com/ https://d.adroll.com/ https://tr.snapchat.com/ https://truyoproductionuscdn.truyo.com/ https://vercel.live/ https://script.hotjar.com/ https://md-scp.kampyle.com/ https://hpc.uat.freedompay.com/ https://client.px-cloud.net/ https://olocdnsandbox.s3.amazonaws.com https://hpc.freedompay.c
strict-transport-security: max-age=31536000; includeSubDomains; preload