onewheel.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Shopify
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
- Font Awesome
- Google Fonts
Third-party hosts loaded (16)
- sfycdn.speedsize.com×100
- cdn.shopify.com×6
- cdn.jsdelivr.net×3
- cdnjs.cloudflare.com×3
- fonts.googleapis.com×2
- shop.app×2
- static.klaviyo.com×2
- www.googletagmanager.com×2
- c.albss.com×1
- cdn-widgetsrepository.yotpo.com×1
- cdn.omakase.ai×1
- fonts.gstatic.com×1
- j.northbeam.io×1
- monorail-edge.shopifysvc.com×1
- use.fontawesome.com×1
- use.typekit.net×1
Social
Contact
- Phone
Registration
- Registrar
- Register.com - Network Solutions, LLC
- Created
- 2003-06-21
- Expires
- 2026-06-21 32 days left
- Updated
- 2022-03-21
- Name servers
-
- coraline.ns.cloudflare.com
- ned.ns.cloudflare.com
DNS records live
- NS
-
- coraline.ns.cloudflare.com
- ned.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 11 TXT records
MS=ms84164342google-site-verification=-b5ltoy-KsOGj70XqI3DiFevsHWWd-UlX4c-GgwKWa8google-site-verification=ssfOsHY-fH5CTiQHc9coTJdems094tU--lMQ9fGPhK0googleff1e21e148c7ca32guqt33ucl5sr0i5tqajv2hlirklaviyo-site-verification=Mh4C9yklaviyo-site-verification=k5AC3snotokenfound270m4qqpfp9vikdnij7dni1jei2i12qiqmemh1qimvvspfq898a0E2A879E0D1
Email authentication partial
- SPF
-
v=spf1 include:spf.mandrillapp.com include:shops.shopify.com include:mail.zendesk.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc-reports@onewheel.compolicy: none (monitoring only) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCQch7d8ALYFk0FKbY5pCALPYSUt2IY4zhKtNWzd/Z0VUazMTot3bclDRRR7B5g06Sj0B4FTfW2SqLEtRbLlj… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbOCg+AbaCJqw7eXkWHPz5K1ee10OaPt0WKxiGQkzfOrEZ/fRWKO2M74H/4S6CRC8YwQ7bIziQWnnfwiV3… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqjyATcU6fHA0CEd2qF16og8TPuY4HhEHEO54m22P5WownTW1yVyhvCMak27/Ku8jDIlTdgPXr7JS4ZW5q…
selectors probed - google:
Certificate (current)
E8
Expires in 39 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- short HSTS max-age
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests;- strict-transport-security
max-age=7889238