modal.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-15 · ok HTTP/1.1 200 837 ms crawled 2026-05-07

US · 108.156.22.105 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Modal: High-performance AI infrastructure
Description: Bring your own code, and run CPU, GPU, and data-intensive compute at scale. The serverless platform for AI and data teams.
Language: en

Open Graph

title: Modal: High-performance AI infrastructure
site name: Modal
description: Bring your own code, and run CPU, GPU, and data-intensive compute at scale. The serverless platform for AI and data teams.

Technology

CDN: Amazon CloudFront

Fonts

Adobe Fonts

Third-party hosts loaded (3)

pbs.twimg.com×24
modal-cdn.com×6
use.typekit.net×1

Social

Registration

Registrar

Porkbun LLC

Created

1999-03-18

Expires

2027-03-18 303 days left

Updated

2026-02-01

Name servers

ns-1468.awsdns-55.org
ns-1834.awsdns-37.co.uk
ns-492.awsdns-61.com
ns-935.awsdns-52.net

DNS records live

NS

ns-1468.awsdns-55.org
ns-1834.awsdns-37.co.uk
ns-492.awsdns-61.com
ns-935.awsdns-52.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 9 TXT records

MS=ms76772968
anthropic-domain-verification-2n4v84=dXbKY8awiTc4mgwFB4Lsa0AbI
cursor-domain-verification-vssjvy=eKp7RNyNMgLjG4BkIBqFj14CM
google-site-verification=AFoEFqcaMG1Yp-MTXucgPd9aTdnzWXz6WYFYZUsF9y4
google-site-verification=zx4bJdgqA6nPqzhPMj6ZWrmLnBHVRSqF4jQeWevdqoY
openai-domain-verification=dv-FpXlzDHKbWTyvMdpGVNwqRqR
pylon-domain-verification-bqqtcc=Px6j9kXNCeH966xmzgOpkyIMu
stripe-verification=B4E89BCA050466E99BCEADDE41DBF4B74607804A9963ABA594388A439510AC93
stripe-verification=d40f0e02e027e460c386133ccc8428f2dd8ba2d2d54b34e280fcc4d3f469bfa5

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:amazonses.com include:22451713.spf07.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc-reports@modal.com; pct=100; adkim=s; aspf=s

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieXV1ozoFtATSr7jofhvM0/teSBflyst7ifi56qLXFzqyzqz/5TmprkC1vF0vpjsXBreHzRANxlAHD…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-09-30 to 2026-10-30

Expires in 164 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://modal.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: frame-src https://modal-cdn.com/sandbox/shim.html data: embed.fillout.com portal.usepylon.com player.vimeo.com www.youtube.com platform.twitter.com; script-src 'self' www.googletagmanager.com cdn.segment.com cdn.getkoala.com platform.twitter.com https://snap.licdn.com/li.lms-analytics/ https://www.redditstatic.com/ https://modal-cdn.com/js-bundles/ 'wasm-unsafe-eval' 'nonce-ctInV+6apYn7AziqhjMuyA=='; style-src 'self' 'unsafe-inline' use.typekit.net p.typekit.net; form-action 'none'; frame-ancestors 'none'
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin