mastercraft.com

HTML metadata

Title: MasterCraft | Wakesurfing, Wakeboarding & Ski Boats
Description: Discover MasterCraft boats—premium performance, innovation, and comfort for wakesurfing, wakeboarding, skiing, and unforgettable days on the water.
Language: en
Canonical: https://www.mastercraft.com/

Open Graph

url: https://www.mastercraft.com/
title: MasterCraft | Wakesurfing, Wakeboarding & Ski Boats
description: Discover MasterCraft boats—premium performance, innovation, and comfort for wakesurfing, wakeboarding, skiing, and unforgettable days on the water.

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (3)

www.googletagmanager.com×2
www.google.com×1
www.youtube.com×1

Social

Contact

Address: 100 Cherokee Cove Drive, 37885, Vonore, TN, US

Registration

Registrar

Squarespace Domains II LLC

Created

1997-06-05

Expires

2026-06-04 16 days left

Updated

2025-05-20

Name servers

ns-cloud-d1.googledomains.com
ns-cloud-d2.googledomains.com
ns-cloud-d3.googledomains.com
ns-cloud-d4.googledomains.com

DNS records live

NS

ns-cloud-d1.googledomains.com
ns-cloud-d2.googledomains.com
ns-cloud-d3.googledomains.com
ns-cloud-d4.googledomains.com

MX

10 mastercraft.com.1.0001.arsmtp.com
20 mastercraft.com.2.0001.arsmtp.com

TXT

Show 6 TXT records

autodesk-domain-verification=xpo5ERKDD7vlti4J8SKt
SFMC-n8aNsCc5Q6kC64nSD5LejDP85_Wswq0uy5fY1Ikp
google-site-verification=o2-CWq64Bt_gVYC8_lTJQzY3mOVbMlk2NWyrvv-Ze9g
zFgfENrj81na8NKcMGo2WlSLomHQ0RCpzu/OHDYOzjvDpPjhG6qRpm9/dh/MUK5jKjjGbNNCmzsB214coxzqcg==
apple-domain-verification=R80gWAWteNztBvx1
google-site-verification=btrdtFtW5JpbUB5pH4aa-I9nea2QS9aeoA0KvyPJYYk

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.salesforce.com mx:mcexchange.mastercraft.com include:amazonses.com include:spf.myconnectwise.net ip4:184.60.150.67 ip4:96.75.3.67 ip4:209.61.151.0/24 ip4:166.78.68.0/22 ip4:198.61.254.0/23 ip4:192.237.158.0/23 ip4:23.253.182.0/23 ip4:104.130.96.0/28 ip4:146.20.113.0/24 ip4:146.20.191.0/24 ip4:159.135.224.0/20 ip4:69.72.32.0/20 ip4:104.130.122.0/23 ip4:146.20.112.0/26 ip4:161.38.192.0/20 ip4:143.55.224.0/21 ip4:143.55.232.0/22 ip4:159.112.240.0/20 ip4:198.244.48.0/20 ip4:204.220.168.0/21 ip4:204.220.176.0/20 ip4:141.193.32.0/23 ip4:159.135.140.80/29 ip4:159.135.132.128/25 ip4:161.38.204.0/22 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:143.55.236.0/22 ip4:198.244.60.0/22 ip4:204.220.160.0/21 ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:helpdesk@mastercraft.com; ruf=mailto:helpdesk@mastercraft.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvCU+T1IkTCgKO4H+2fKU6OpbDz2MX48a9EbfjSiPaxVskFqH3BKZKVcBtFIrkAFYsATiMtWjk2cD4…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTYevcMDNq8xZZvKwzQM668pigdGscdVHBPMpsEBkobfkB1MPd1cTgUaE3qx3z2/WIeNpnnSJVI4EG…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12Qnz9tFxHfmGyWTSEFwQNL9aA9pVQbhykKOLv419FFLT3k/6KGWgQuXLzsQ8s8reTbJFQJ5gIazHoLkla…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zhucjq7WoyXBq+fF1l5WPvhtBHFkNqTSgsHCymLzPqsLJxEI7Eo1XYAuqZXKrJDVSTCAFPDNh8EDo4vJ2…

selectors probed

Certificate (current)

Entrust OV TLS Issuing RSA CA 2

from 2025-11-17 to 2026-12-19

Expires in 214 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.mastercraft.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline' blob: www.google-analytics.com https://content.powerapps.com https://*.content.powerapps.com https://www.googleoptimize.com *.mastercraft.com *.px.octillion.tv *.octillion.tv https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://*.clarity.ms/ *.doubleclick.net tagmanager.google.com www.googletagmanager.com *.livechatinc.com *.youtube.com *.google.com *.googleoptimize.com *.googleadservices.com *.livechat-static.com https://cdn.userway.org/widget.js *.userway.org *.usersnap.com *.zmags.com https://www.google.com/recaptcha/ *.gstatic.com *.widget.usersnap.com *.resources.usersnap.com https://ethn.io/ https://connect.facebook.net *.doubleclick.net *.facebook.net *.facebook.com https://bat.bing.com/bat.js *.bat.bing.com *.bing.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://www.googleadservic
strict-transport-security: max-age=31536000; includeSubDomains;