passes.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- Vercel
- CMS
- Next.js
Third-party hosts loaded (2)
- cdnpasses.com×125
- www.facebook.com×1
Contact
Registration
- Registrar
- NameCheap, Inc.
- Created
- 1997-11-03
- Expires
- 2026-11-02 165 days left
- Updated
- 2025-10-03
- Name servers
-
- ns-1270.awsdns-30.org
- ns-180.awsdns-22.com
- ns-1927.awsdns-48.co.uk
- ns-522.awsdns-01.net
DNS records live
- NS
-
- ns-1270.awsdns-30.org
- ns-180.awsdns-22.com
- ns-1927.awsdns-48.co.uk
- ns-522.awsdns-01.net
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
klaviyo-site-verification=UnRQyv
- Verified for
-
- Anthropic
Email authentication strong
- SPF
-
v=spf1 include:_spf.google.com include:mail.zendesk.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarc@passes.com; pct=100; adkim=r; aspf=rpolicy: quarantine - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArywq9WLf9SgEWGvJei4bAolxMhF6rKOZI4iNGMcKjcIxuq7DIcWByAdwQhYwpLzeIpInOMcJg6k8Mf…
selectors probed - google:
Certificate (current)
Amazon RSA 2048 M04
Expires in 149 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; connect-src 'self' https: wss: data: blob: *.posthog.com; font-src 'self' data:; frame-src 'self' elements.basistheory.com js.basistheory.com www.google.com pay.google.com www.paypal.com www.paypalobjects.com www.sandbox.paypal.com withpersona.com inquiry.withpersona.com www.printful.com cdn.plaid.com; frame-ancestors 'self'; img-src 'self' blob: data: https://cdnpasses.com www.paypal.com t.paypal.com www.sandbox.paypal.com www.paypalobjects.com www.gstatic.com storage.googleapis.com files.cdn.printful.com img.riskified.com media.tenor.com pledgeling-res.cloudinary.com www.facebook.com alb.reddit.com static.ads-twitter.com ads-twitter.com ads-api.twitter.com analytics.twitter.com t.co; media-src 'self' blob: https://cdnpasses.com https://*.live-video.net; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' applepay.cdn-apple.com cdn.withpersona.com cwamerchantservices.transactiongateway.com files.cdn.printful.com js.basistheory.com pay.google.com storage.googleapi- strict-transport-security
max-age=63072000; includeSubDomains; preload