metalcloak.com

HTML metadata

Title: Metalcloak Lift Kit | Suspension Lift Kits for Jeep TJ, JK, JL & More
Description: Metalcloak is the leading manufacturer of game-changing off-road and 4x4 aftermarket lift kit suspension systems for Jeep Wranglers, Gladiators, & more.
Language: en

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (5)

www.armoredworks.com×11
analytics.ahrefs.com×1
connect.breadpayments.com×1
static.cloudflareinsights.com×1
www.googletagmanager.com×1

Social

Contact

Phone

9166318071

Address

2484 Mercantile Dr, 95742, Rancho Cordova, California, US

Registration

Registrar

Cloudflare, Inc.

Created

2006-07-20

Expires

2026-07-20 61 days left

Updated

2025-06-20

Name servers

elle.ns.cloudflare.com
gabe.ns.cloudflare.com

DNS records live

NS

elle.ns.cloudflare.com
gabe.ns.cloudflare.com

MX

0 metalcloak-com.mail.protection.outlook.com

TXT

Show 5 TXT records

google-site-verification=QmzFNG5gmEC6NU9MQ2WyH2pfQ8X2X77kKvpsXCptVgw
google-site-verification=f7GCP5MQgQB4Yng8_0WH44FHftpDIbZscU_SN43Ola8
pinterest-site-verification=74358a07178125d15e4f89f5615daccf
apple-domain-verification=ERKhSvv3dF9WxeoL
google-site-verification=LHgFxLBfoVcBI1NVWgcbF6f80exYvb4W-C49UG3eBjo

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=25; adkim=s; aspf=s; rua=mailto:137437dafd074ae2bd6de478060a24c7@dmarc-reports.cloudflare.net; ruf=mailto:137437dafd074ae2bd6de478060a24c7@dmarc-reports.cloudflare.net; fo=1

policy: quarantine · pct=25

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDR/FTDSQ41jsu5S2Kl8km6zbs/RMeb4+NSQMQ//2jXdmQESJI8tgBGxjlsnz2fhdcCKinXqJN65p/rEC3bsa…

selectors probed

Certificate (current)

E7

from 2026-05-16 to 2026-08-14

Expires in 87 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://metalcloak.com/

present

content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing HSTS
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: CROSS-ORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
content-security-policy-report-only: font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com fonts.googleapis.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintre