onbeam.com

.com crawl

First seen 2026-05-31 · Last seen 2026-06-01 · ok HTTP/1.1 200 674 ms crawled 2026-06-01

US · 216.150.1.1 · AS16509 Amazon.com, Inc.

Reputation 92/100 weak subdomain policy

Classifying

HTML metadata

Title
Beam
Description
Together, we build, invest, and accelerate frontier technologies on Beam, the sovereign L1 blockchain. Home to the next generation of pioneers, builders, and innovators.
Language
en

Open Graph

title
Beam
site name
Beam
description
Together, we build, invest, and accelerate frontier technologies on Beam, the sovereign L1 blockchain. Home to the next generation of pioneers, builders, and innovators.

Technology

CDN
Vercel
CMS
Next.js

Third-party hosts loaded (1)

  • d1sbvhbby74rp9.cloudfront.net×2

Social

Contact

Email

Registration

Registrar
NameCheap, Inc.
Created
2015-03-20
Expires
2027-03-20 289 days left
Updated
2026-02-19
Name servers
  • lex.ns.cloudflare.com
  • ulla.ns.cloudflare.com

DNS records live

NS
  • lex.ns.cloudflare.com
  • ulla.ns.cloudflare.com
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • 66c9c663-3ade-48ad-ab83-78d4d9962cb1=9c2312f5e9ede130280c0928238e371ea13918d6f3b7e8cbffdaf4f8665d57d3
Verified for
  • Atlassian
  • Google
  • Slack

Email authentication strong

SPF
v=spf1 include:_spf.google.com include:mail.zendesk.com include:servers.mcsv.net include:45877938.spf01.hubspotemail.net include:_spf.nethunt.email -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:dmarc@meritcircle.io; pct=100; sp=none
policy: quarantine · sp=none
DKIM
Show 4 DKIM selectors
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieZ+Azca/3ygsvGViK6t9HHbMgBCEmMBk0GXg5ieyzVmhIA6N1gxpzRPb/eQ7ep3TPwQue/kl1buQV…
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GZYgRKiFdX6ki9EeQU8H49+3Bc9wUHzQQs7AkzvTfeLNvsYsfqYbbYnBPXNuUyRd1rX4Gz0GN1BQy2n6A…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8psOs7pxpF1ZjjByOhTVLuzNfq0UE9So1cTGxmWR0ZA3ZmJlPSLYyyztmzzDH+uTgoXAM2YxzI05YPrFG…
selectors probed

Certificate (current)

R13
from 2026-04-21 to 2026-07-20
Expires in 47 days

HTTP security headers

Header hygiene 60/100 Checked live page: https://onbeam.com/

present
  • strict-transport-security
  • content-security-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://vercel.live https://*.googletagmanager.com https://*.google-analytics.com; style-src 'self' 'unsafe-inline' https://vercel.live; connect-src 'self' blob: https://*.onbeam.com https://vercel.live https://*.sentry.io https://gamingmeritcircle.zendesk.com https://*.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://*.analytics.google.com; img-src *; media-src 'self' blob: data: https://d1sbvhbby74rp9.cloudfront.net; font-src 'self' https://vercel.live https://assets.vercel.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://vercel.live https://td.doubleclick.net https://www.googletagmanager.com; upgrade-insecure-requests;
strict-transport-security
max-age=63072000

Links to (15)

Linked from (1)