pivotcycles.com

HTML metadata

Title

Home - Pivot Cycles

Description

Where die-hard passion meets relentless innovation. Precision-driven engineering making Pivot bikes the best in the world.

Language

en

Canonical

https://www.pivotcycles.com/en-us

Translations

en-us
en-zz

Open Graph

url: https://www.pivotcycles.com/en-us
title: Home
site name: Pivot Cycles
description: Where die-hard passion meets relentless innovation. Precision-driven engineering making Pivot bikes the best in the world.

Technology

CDN: Cloudflare
CMS: WordPress

Fonts

Adobe Fonts

Third-party hosts loaded (4)

cdn.shopify.com×101
res.cloudinary.com×27
shop.app×1
use.typekit.net×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2007-05-28

Expires

2031-01-09 1696 days left

Updated

2026-01-09

Name servers

kanye.ns.cloudflare.com
tani.ns.cloudflare.com

DNS records live

NS

kanye.ns.cloudflare.com
tani.ns.cloudflare.com

MX

10 d327246a.ess.barracudanetworks.com
5 d327246b.ess.barracudanetworks.com
99 pivotcycles-com.mail.protection.outlook.com

TXT

Show 6 TXT records

google-site-verification=PYX1NXWbCB3sQGJYOfzpuY4oxTF83TYEpOSPuTtRSd0
google-site-verification=fkzA5O-KuVp4M3bJIUsb_Vc0PSFhGdPWwB49uxWEN9A
google-site-verification=iZyTM8C-shFNslAXegpTFd0vdh7UhXsM0c7A5c-j3hw
apple-domain-verification=q0ckwBiMjNrcKyIi
google-site-verification=8uV6y9mxYA08j-LcbG_23RruyWneEj4B82rREkwdFRQ
google-site-verification=K_MF96l6G522zbNy854wRLSZ7b-mtFLhJ8hiRl18wHg

Email authentication strong

SPF

v=spf1 a a:cvlusweb1.pivotcycles.com a:clvussql1.pivotcycles.com include:spf.protection.outlook.com include:21450074.spf02.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:184d77870f6148a59d275912d6fd9f25@dmarc-reports.cloudflare.net,mailto:rua+pivotcycles.com@dmarc.barracudanetworks.com; ruf=mailto:ruf+pivotcycles.com@dmarc.barracudanetworks.com; aspf=r

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCPMQRNrreaATWrZRmbq2Zi/M3cwF6IQ7KCIuhZbOtdzOF0Pv4K6YEKUmY0iv9gIqmSEf/LKjn0iXL6bZrsN+…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

E7

from 2026-05-11 to 2026-08-09

Expires in 82 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.pivotcycles.com/en-us

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src 'self' 'nonce-eab58a62c731453952f741ec4a70a373' https://cdn.shopify.com https://shopify.com; frame-ancestors 'none'; style-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net https://*.livechatinc.com https://*.klarnacdn.net https://*.acsbapp.com https://*.hubspot.com https://*.hsappstatic.net https://cdn.cookie-script.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src pivotcyclescms.wpenginepowered.com https://cms.pivotcycles.com https://cdn.shopify.com https://unpkg.com https://cdn.jsdelivr.net https://*.affirm.com https://prodregistryv2.org:* https://featureassets.org:* https://statsigapi.net:* https://*.locally.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.facebook.com https://connect.facebook.net https://*.clarity.ms https://api.livechatinc.com wss://lc.c
strict-transport-security: max-age=31536000