onbeam.com
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Next.js
Third-party hosts loaded (1)
- d1sbvhbby74rp9.cloudfront.net×2
Social
Contact
Registration
- Registrar
- NameCheap, Inc.
- Created
- 2015-03-20
- Expires
- 2027-03-20 289 days left
- Updated
- 2026-02-19
- Name servers
-
- lex.ns.cloudflare.com
- ulla.ns.cloudflare.com
DNS records live
- NS
-
- lex.ns.cloudflare.com
- ulla.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
66c9c663-3ade-48ad-ab83-78d4d9962cb1=9c2312f5e9ede130280c0928238e371ea13918d6f3b7e8cbffdaf4f8665d57d3
- Verified for
-
- Atlassian
- Slack
Email authentication strong
- SPF
-
v=spf1 include:_spf.google.com include:mail.zendesk.com include:servers.mcsv.net include:45877938.spf01.hubspotemail.net include:_spf.nethunt.email -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarc@meritcircle.io; pct=100; sp=nonepolicy: quarantine · sp=none - DKIM
-
Show 4 DKIM selectors
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieZ+Azca/3ygsvGViK6t9HHbMgBCEmMBk0GXg5ieyzVmhIA6N1gxpzRPb/eQ7ep3TPwQue/kl1buQV… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GZYgRKiFdX6ki9EeQU8H49+3Bc9wUHzQQs7AkzvTfeLNvsYsfqYbbYnBPXNuUyRd1rX4Gz0GN1BQy2n6A… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8psOs7pxpF1ZjjByOhTVLuzNfq0UE9So1cTGxmWR0ZA3ZmJlPSLYyyztmzzDH+uTgoXAM2YxzI05YPrFG…
selectors probed - google:
Certificate (current)
R13
Expires in 47 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://vercel.live https://*.googletagmanager.com https://*.google-analytics.com; style-src 'self' 'unsafe-inline' https://vercel.live; connect-src 'self' blob: https://*.onbeam.com https://vercel.live https://*.sentry.io https://gamingmeritcircle.zendesk.com https://*.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://*.analytics.google.com; img-src *; media-src 'self' blob: data: https://d1sbvhbby74rp9.cloudfront.net; font-src 'self' https://vercel.live https://assets.vercel.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://vercel.live https://td.doubleclick.net https://www.googletagmanager.com; upgrade-insecure-requests;- strict-transport-security
max-age=63072000
Links to (15)
Linked from (1)
- nlh.xyz×1