onbuoy.com

HTML metadata

Title: OnBuoy | Homepage
Description: OnBuoy connects boaters with private guest moorage, transient slips, and dock space throughout Washington State, including the Puget Sound, San Juan Islands, and more. Reserve eco-friendly moorage options in popular destinations like Gig Harbor, Vashon Island, Bainbridge Island, and Orcas Island. Find available guest moorage listings, book your stay, and support sustainable boating practices with OnBuoy.
Language: en-US
Canonical: https://onbuoy.com/

Open Graph

url: https://onbuoy.com/
title: OnBuoy | Homepage
locale: en-US
site name: OnBuoy
description: OnBuoy connects boaters with private guest moorage, transient slips, and dock space throughout Washington State, including the Puget Sound, San Juan Islands, and more. Reserve eco-friendly moorage options in popular destinations like Gig Harbor, Vashon Island, Bainbridge Island, and Orcas Island. Find available guest moorage listings, book your stay, and support sustainable boating practices with OnBuoy.

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (6)

sharetribe-assets.imgix.net×4
api.mapbox.com×3
www.googletagmanager.com×3
js-na2.hs-scripts.com×1
js.stripe.com×1
purecatamphetamine.github.io×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2018-07-08

Expires

2027-07-08 415 days left

Updated

2025-06-27

Name servers

ns11.domaincontrol.com
ns12.domaincontrol.com

DNS records live

NS

ns11.domaincontrol.com
ns12.domaincontrol.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

stripe-verification=2ea02a7e20caae5ca282b1e672516a698a56eab5b8f417f497cc0af8b389e643
google-site-verification=PcfaK_AZBfeeFUwhA96K-G9Fxn6-uHHQMyuXqPyl7iM

Email authentication partial

SPF

v=spf1 include:_spf.google.com include:45565730.spf10.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-04-25 to 2026-07-24

Expires in 66 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.onbuoy.com/

present

strict-transport-security
content-security-policy-report-only
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

missing Content Security Policy
missing frame protection
missing Permissions Policy

Header values

referrer-policy: origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
content-security-policy-report-only: report-uri /csp-report;base-uri 'self';default-src 'self';child-src blob:;worker-src 'self' http://localhost:4000/ https://onbuoy.com blob:;connect-src 'self' https://flex-api.sharetribe.com undefined *.st-api.com maps.googleapis.com places.googleapis.com *.tiles.mapbox.com api.mapbox.com events.mapbox.com https://d3hb14vkzrxvla.cloudfront.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com plausible.io *.plausible.io fonts.googleapis.com sentry.io *.sentry.io *.stripe.com https://analytics.google.com https://www.google.co.in https://google.com api.hubspot.com *.hscollectedforms.net *.hs-scripts.com https://forms-na2.hsforms.com https://api-na2.hubspot.com https://track-na2.hubspot.com https://sharetribe.imgix.net https://beacon-v2.helpscout.net;font-src 'self' data: assets-sharetribecom.sharetribe.com fonts.gstatic.com;form-action 'self';frame-src 'self' *.stripe.com *.youtube-nocookie.com https://bid.g.doubleclick.net https://td.d

Links to (5)

Linked from (1)

rbaw.org×2