rdoequipment.com

HTML metadata

Title: John Deere and Vermeer Equipment Dealer | RDO Equipment Co.
Description: Discover a wide-range range of John Deere & Vermeer equipment at one of our RDO store locations, offering top-notch machinery solutions for agriculture, construction, and more.
Language: en
Generator: Sitefinity 15.4.8625.0 DX
Canonical: https://www.rdoequipment.com

Open Graph

url: https://www.rdoequipment.com
title: John Deere and Vermeer Equipment Dealer
site name: RDO Equipment Co.
description: Discover a wide-range range of John Deere & Vermeer equipment at one of our RDO store locations, offering top-notch machinery solutions for agriculture, construction, and more.

Technology

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (5)

assets-sitefinity-cdn-prod.azureedge.net×11
digitalcommerce-sitefinity-cdn-prod.azureedge.net×10
cdn.cookielaw.org×1
cdn.insight.sitefinity.com×1
www.googletagmanager.com×1

Social

Contact

Email

ect-punchout@rdoequipment.com

Address

225 Broadway N, 58102, Fargo, ND, US

Registration

Registrar

Gandi SAS

Created

1997-01-14

Expires

2028-01-13 602 days left

Updated

2025-10-28

Name servers

ns-1067.awsdns-05.org
ns-1924.awsdns-48.co.uk
ns-348.awsdns-43.com
ns-766.awsdns-31.net

DNS records live

NS

ns-1067.awsdns-05.org
ns-1924.awsdns-48.co.uk
ns-348.awsdns-43.com
ns-766.awsdns-31.net

MX

0 rdoequipment-com.mail.protection.outlook.com

TXT

Show 7 TXT records

jamf-site-verification=wJegWwj3hbaMKjYyGuKFqg
_whpv1aw4odfdyoyswjzf1qx79s7r9s0
_wecmheei9fznfy1egctl3ak4q6bheys
_xi42qxqwxeuqtxsts14k0v5y6yxpl70
e/AL8bigC9ZU/2eP4fiDIyNcxiVT4AlMdqN1zshxFrwMaUp3k077Cx5rP128pCCNFGW2xbkj9w22biKi1/9eHA==
Foxit-domain-verification=abb18efd39410ba60624a94e8ad7a94f
ibmid=a2052a56-4b40-420a-8496-e1d8b6929bd5

Verified for

Apple
Atlassian
DocuSign
Dynamics 365
Google
Microsoft 365
OneTrust
Twilio

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.rdoffutt.com include:_spf.act-on.net include:_spf.bigcommerce.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCiSOQYoWBknAG6jnSyWXM4uf1xfaRDqwWLvtp8FcDQm6XbCrmOgbbpWt42a/4B2JCU/vNhYC2h5TfMBui6MY…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8swy5nuKCvQ95bUdPz/hf5GmeQ7Xw6BwjdElWgStb81gARKbbLe/kLDuBHTiQRcCQtSapfnvkZ0QDPzmi…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7WCOK9yDcgV7xwqtmpjZkL3w/x/YKKRaWquRPhQ62gIg1xTV/Ro1rlj8ttRj3bYy3p68rHJIFXavcaMoz8HZ7TU…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-02-17 to 2027-03-06

Expires in 289 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.rdoequipment.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src *.googleapis.com *.gstatic.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com cdnjs.cloudflare.com https://*.siteimprove.net 'unsafe-inline' 'unsafe-eval' *.msecnd.net *.google.com *.googletagmanager.com *.googleadservices.com *.ads-twitter.com *.callrail.com *.licdn.com https://siteimproveanalytics.com *.bing.com *.hotjar.com *.doubleclick.net *.livehelpnow.net https://www.youtube.com/iframe_api *.azureedge.net *.twitter.com *.rdoequipment.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://cdn.polyfill.io https://*.criteo.com https://static.criteo.net https://tags.srv.stackadapt.com https://qvdt3feo.com https://*.clarity.ms https://js.adsrvr.org/up_loader.1.1.0.js https://assets.sitescdn.net/ytag/ytag.min.js https://analytics.tiktok.com/i18n/pixel/events.js https://cdn.sheetjs.com/xlsx-0.20.1/package/dist/xlsx.full.min.js https://*.dynamics.com https://*.tiktok.com https://cxppna1rdrect01sa02cdn
strict-transport-security: max-age=31536000; includeSubDomains