optos.com

HTML metadata

Title

Optos Ultra-widefield (UWF™) Retinal Imaging Devices for Eyecare - Production

Description

Optos products give the most complete view of the retina and help with early detection of systemic and ocular disease. Learn about our products here.

Language

en

Canonical

https://www.optos.com/

Translations

de
en
fr

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (4)

cdn.cookielaw.org×2
www.googletagmanager.com×1
www.optos.de×1
www.optos.fr×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1996-10-03

Expires

2026-10-02 136 days left

Updated

2021-11-06

Name servers

nelly.ns.cloudflare.com
vicente.ns.cloudflare.com

DNS records live

NS

nelly.ns.cloudflare.com
vicente.ns.cloudflare.com

MX

10 us-smtp-inbound-1.mimecast.com
10 us-smtp-inbound-2.mimecast.com

TXT

Show 13 TXT records

globalsign-domain-verification=CyP9IpYEYOQG75kMxdOSTRPRXxhzVhYx2fpIp0cpuU
globalsign-domain-verification=PcAkUjyixW6FxNxCnxRlsiKorDLYxaVt2oCfC8anPF
globalsign-domain-verification=z31fOC-2BPPciwE7ncY4z8usaP9XoFqRksRzvz8vkK
google-site-verification=I95z3v7kvNtDa__5QbqlM8M3E4p2oGTWLVAlSISiZ4Y
google-site-verification=bsvB2hsY_W6DRxrI2prBxg7pxiSOSrnkSn0uU8ptQTg
google-site-verification=hNsoHr4QPVoXQDJeVJZwGUIbaKjXlo8e5_6nTjzfUDU
google-site-verification=mK0aNI9zb36kpJifQnYT6O4Gu9QHARj5MKGlmwh5g8c
have-i-been-pwned-verification=43be345edcb5dfc2c49e4a57f3a734ce
lovable_verification=EZ8x2UP7s0Zo4wLJyaU5
6d988hkrqz0ll38wjfyh43hw94ss27nc
_cf-custom-hostname.optos.com=a745f612-03c5-46ad-9099-08d48a4eb180
atlassian-domain-verification=bTv7Up3mF8OpUYC/7aySZYHDAahP7xEXoAmQ8Q0L01ECIx9peJi7pvw1vD1L8Z6a
docusign=5dd1fdd3-ecfa-4e3d-9195-d53ba6623777

Email authentication strong

SPF

v=spf1 include:_netblocks.mimecast.com include:_spf-dc2.successfactors.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; fo=1; rua=mailto:nikon00001-ra@dmarc25.jp;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxS86/60RE8mo066YlCcoRXBBhqr3WkSdzXVQp8veMva8QJ2vH2QBT+HI+TI+uVoRfdF3WlSJTcLoPOuTw0i…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDI90OMGWVi9Tedy6FqK4/B1RTYcWwHDeJHJ/wYVxNq5PF3dDezKuLJ1QpzbjSDA5fI4q7NyGfob3FQvxKL2k…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO1+rnel+EQv9ZzS7YmtASy9q4SmNQoIwGFk4+noTasWU6/O8UlGhC3ol8QRGbmswkvUhPof0tgyPHtJHj…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDR4bjHrtvGGFxHqU2pTSrDMeSY+gswLzUGcEGN5BMc6CvrsvZu32V8klo7gyP+jm25Tu2rhUE4HnoL7gi0r0V3Gy…

selectors probed

Certificate (current)

WE1

from 2026-04-26 to 2026-07-25

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.optos.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src * data: 'unsafe-eval' 'unsafe-inline' blob: ;worker-src * data: 'unsafe-eval' 'unsafe-inline' blob: ;connect-src 'self' https://js.monitor.azure.com https://*.monitor.azure.com script.google.com geolocation.onetrust.com maps.googleapis.com analytics.google.com www.gstatic.com www.google.com dc.services.visualstudio.com cdn.cookielaw.org vimeo.com img.youtube.com stats.g.doubleclick.net www.google-analytics.com api.vimeo.com *.hotjar.com *.hotjar.io wss://*.hotjar.com forms.feedblitz.com c.ba.contentsquare.net; script-src 'nonce-FLyXjzE0tCVdw00dKCJjiOr6SHLZIlWzKRStbSIFBVg=' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'self' data: blob: addevent.com www.addevent.com cdn.addevent.com web-sdk-eu.aptrinsic.com www.vimeo.com vimeo.com maps.googleapis.com code.jquery.com localhost cdnjs.cloudflare.com player.vimeo.com www.gstatic.com www.google.com js.monitor.azure.com cdn.cookielaw.org ajax.googleapis.com cdn.jsdelivr.net www.googletagmanager.com www.google-analytics.co
strict-transport-security: max-age=2592000