nalgene.com

HTML metadata

Title

Nalgene – The original water bottle. BPA Free.

Description

Nalgene has a water bottle for every lifestyle and every adventure. BPA free, durable and dishwasher safe.

Language

en-US

Generator

WP Rocket 3.21.1

Canonical

https://nalgene.com/

Feeds

Nalgene » Feed RSS
Nalgene » Comments Feed RSS

Open Graph

url: https://nalgene.com/
title: Nalgene – The original water bottle. BPA Free.
locale: en_US
site name: Nalgene
description: Nalgene has a water bottle for every lifestyle and every adventure. BPA free, durable and dishwasher safe.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager
Microsoft Clarity

Ads

Meta Pixel
TikTok Pixel

Fonts

Google Fonts

Third-party hosts loaded (18)

fonts.googleapis.com×5
js.hs-scripts.com×3
pay.google.com×3
flex.cybersource.com×2
fonts.gstatic.com×2
www.google.com×2
www.googletagmanager.com×2
analytics.tiktok.com×1
bat.bing.com×1
cdn.attn.tv×1
cdn.callrail.com×1
connect.facebook.net×1
d.impactradius-event.com×1
js.hs-analytics.net×1
js.hs-banner.com×1
js.hscollectedforms.net×1
www.clarity.ms×1
www.gstatic.com×1

Social

Contact

Phone

1-844-625-4363

Registration

Registrar

MarkMonitor Inc.

Created

1997-04-15

Expires

2027-04-16 330 days left

Updated

2026-03-15

Name servers

pdns1.ultradns.net
pdns2.ultradns.net
pdns3.ultradns.org
pdns4.ultradns.org
pdns5.ultradns.info
pdns6.ultradns.co.uk

DNS records live

NS

pdns1.ultradns.net
pdns2.ultradns.net
pdns3.ultradns.org
pdns4.ultradns.org
pdns5.ultradns.info
pdns6.ultradns.co.uk

MX

10 mxa-002a2102.gslb.pphosted.com
10 mxb-002a2102.gslb.pphosted.com

Verified for

Google
Microsoft 365

Email authentication strong

SPF: v=spf1 ip4:148.163.148.140 ip4:208.86.201.75 ip4:198.22.92.56 ip4:198.22.92.57 include:_netblocks.eloqua.com include:spf.protection.outlook.com ~all
softfail (~all)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-18 to 2026-07-17

Expires in 58 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://nalgene.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src 'self' https://cdnjs.cloudflare.com *.cdnjs.cloudflare.com www.googletagmanager.com www.gstatic.com www.google.com *.paypal.com *.googleapis.com; form-action 'self' *.facebook.com *.eloqua.com; object-src 'self' data: *.facebook.com; connect-src 'self' *.kaptcha.com google.com *.google.com *.tiktok.com *.omappapi.com *.pinterest.com blob: fonts.gstatic.com *.facebook.com *.clarity.ms *.paypal.com forms.hscollectedforms.net *.googleapis.com *.google-analytics.com yoast.com *.yoast.com *.crazyegg.com *.doubleclick.net *.callrail.com *.hs-scripts.com qnmhf.nalgene.com events.attentivemobile.com exceptions.hubspot.com nalgene.attn.tv nalgene-us.attn.tv events.nalgene.com capi.newengendisco.com cdn.attn.tv analytics-ipv6.tiktokw.us www.gstatic.com https://ipapi.co https://*.ipapi.co; font-src 'self' fonts.googleapis.com fonts.gstatic.com data:; script-src 'self' *.apple.com *.cybersource.com *.googleoptimize.com optimize.google.com
strict-transport-security: max-age=31536000; includeSubDomains; preload