indexo.dev

onaroll.co

.co crawl

First seen 2026-04-20 · Last seen 2026-05-13 · ok HTTP/1.1 200 2093 ms crawled 2026-05-13

US · 34.174.83.65 · AS396982 Google LLC

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Home - Onaroll
Description
Onaroll rewards the behaviors that protect your margin without adding tasks to your managers' day. Onaroll helps reduce your hiring needs.
Language
en-US
Generator
Elementor 3.35.9; features: e_font_icon_svg, additional_custom_breakpoints; settings: css_print_method-external, google_font-enabled, font_display-swap
Canonical
https://onaroll.co/
Feeds

Open Graph

url
https://onaroll.co/
title
Home - Onaroll
locale
en_US
site name
Onaroll
description
Onaroll rewards the behaviors that protect your margin without adding tasks to your managers' day. Onaroll helps reduce your hiring needs.

Technology

Server
nginx
CMS
WordPress
Fonts
  • Google Fonts

Third-party hosts loaded (5)

  • fonts.googleapis.com×4
  • cdn.jsdelivr.net×3
  • cdnjs.cloudflare.com×1
  • fonts.gstatic.com×1
  • gmpg.org×1

Contact

Email

DNS records live

NS
  • ns-12.awsdns-01.com
  • ns-1504.awsdns-60.org
  • ns-1765.awsdns-28.co.uk
  • ns-804.awsdns-36.net
MX
  • 0 onaroll-co.mail.protection.outlook.com
TXT
Show 4 TXT records
  • _globalsign-domain-verification=_zOyPn2rmpzF6YiJGnEp77LZ6Q_TPGaErs0e2rC7VY
  • firebase=api-gateway-prod-435816
  • google-site-verification=h5Ob5zPzR4n7x_TK_FOY8waDoOWmT6zBHFjF8tRzJsA
  • MS=ms54416133

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:_spf.firebasemail.com -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:dmarc@onaroll.co;
policy: quarantine
DKIM
Show 4 DKIM selectors
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCPUNzToUCgKxLD8y99SID+LUAA0rqQGvpkTHw81ACxT55VLdl2Ue3t8qIcGgTsCKvDx9Z7/2/WTi/ssRWfHv…
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBam/vDZDlb3/yJ4kLT/ktHeVZNUJQUDh1s//IsQLJcXqQQKfG5MK0FBBPkTEYK9lDqgZhB2FTdLIG…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5fetP6bpFnGid9BCahdagpvBFM6hKhXKlOoKLyrHpf4eE6lxgwlBOAiG5TTKgXGerPdRHf4AD6HXHYLQI…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOVsyL03wQWvRnovRkXjXeVNQg7tDDOqc1IAOBdFS9VfU6JvnyQzgCVQZKqdKYINebo0ueg8k1fs1wcDYC…
selectors probed

Certificate (current)

GlobalSign GCC R6 AlphaSSL CA 2025
from 2026-04-04 to 2026-10-20
Expires in 153 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://onaroll.co/

present
  • x-content-type-options
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff

Links to (2)

Linked from (1)