rxo.com

HTML metadata

Title

RXO - Smart solutions to move your freight - RXO

Description

We bring together third-party capacity, cutting-edge technology, and industry-leading expertise to support the shippers and carriers in our network.

Language

en-US

Generator

WordPress 6.7.5

Canonical

https://rxo.com/

Translations

en
en-us

Open Graph

url: https://rxo.com/
title: RXO - Smart solutions to move your freight - RXO
locale: en_US
site name: RXO
description: We bring together third-party capacity, cutting-edge technology, and industry-leading expertise to support the shippers and carriers in our network.
updated time: 2026-03-27T07:55:11-04:00

Technology

Server: nginx
CMS: WordPress

Analytics

Google Analytics
Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (9)

cdnjs.cloudflare.com×3
ajax.googleapis.com×2
fonts.googleapis.com×2
www.googletagmanager.com×2
cdn.decibelinsight.net×1
collection.decibelinsight.net×1
fonts.gstatic.com×1
ssl.google-analytics.com×1
www.google-analytics.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

1998-11-20

Expires

2026-11-19 184 days left

Updated

2025-10-18

Name servers

f5-extdns-clt.rxo.com
inpau10022.rxo.com

DNS records live

NS

f5-extdns-clt.rxo.com
inpau10022.rxo.com

MX

10 mxa-0078d301.gslb.pphosted.com
10 mxb-0078d301.gslb.pphosted.com

TXT

Show 21 TXT records

pardot1000081=049a6d6372c3b618ffedf631abe8652c9ba21c8016250970c5f24ec80e781933
workplace-domain-verification=7wIJ024dMMp8FLmEBq7bBs5qqqnSuj
google-site-verification=maPGyJi_kQaRZ5vjG43Oty3fGTmisSaYuLEa05lA5LM
google-site-verification=nkeOSz25sUrsJhKqQ6gtSRDq2cPO-Kc25IayNZIi0-g
smartsheet-site-validation=Jq5vjLzCr7dkf89EhVDkXDyDbqv8901n
google-site-verification=Z4CyicHCCHKn7nGVH6yjANzD1Z7l-Kzhpn4VMoNLGnU
google-site-verification=eLjky1YbgpMnjDfrqUYkccJqtPNdObIsNLzVaqK6dYQ
google-site-verification=bkinOmONfTCGS05-8J66gsHXl-Sl32dCfJWetfahw78
atlassian-domain-verification=ahE8rfevC5B9zXpR1We7hDnQ9I7UpmUiNWk9ObX7R3P5Nhb8RTTZlTnx7u/4Nm2W
apple-domain-verification=TEeb2TZW0O9YXPUR
msfpkey=6ssvciaelskfpedcytogenr3o
google-gws-recovery-domain-verification=46835083
onetrust-domain-verification=6dda099f6e0e48c580de72adb7833a53
google-site-verification=7Y03-GZjEvL2ukxBpcEpRlge2PHwSICHzMdsNZbRpdQ
amazonses:mYDpxBODEcRq37/qQjtt8ZsBkmUVv5uRc/eWTbkxOIE=
6pkwp1xf8kw8mvtq6mwgv40pd0d2tc7f
pendo-domain-verification=2-xXDUXDIMINGRr4p349drv76-k
cisco-ci-domain-verification=5269e2c06e668b2a350d976b976a75a1380af1755db84b32bd5f5ad5fcfe33b2
google-site-verification=chbxiEM-pnaTwQ1pOu91xFL3hRsyTkldteEWMI8uuPs
atlassian-domain-verification=Tp3o198f4x0INo/1XgywF0LhOXyKTss8K2YJE9V1mNv7d1H7U0iUX7lsvFkjqwrt
google-site-verification=Cuob8IfHluD0S271fxGQs1NN5xKZDcbcJszkoJqGHwI

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com;ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXtBtQX7cYFpS5BqYyHvP31DfenBMay43BUXHmsPS5G6laSxILS9QzUNezNdrlyyrabx+QdwCrtiYj…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnN9PHd1TEz0H26skM6IFznefhCwxgo0WOpCxFnvgg4lVc/5JACBDDW+fGlHZUM556cHue78VRm7fqyB0H…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cI4p3S7qgFS4sOBsXLzA/q2d2UPfXSQHZXLqAtDQzNY6k8JKIUp/DxbnKkZQYUvB6tfmwgTI+WFfIB1gm…

selectors probed

Certificate (current)

R13

from 2026-04-12 to 2026-07-11

Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://rxo.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy

Header values

x-frame-options: sameorigin
permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.google.com.ph https://*.google.co.in https://*.googleadservices.com https://*.gstatic.com https://*.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.decibelinsight.net https://*.zi-scripts.com https://js-agent.newrelic.com https://*.qualtrics.com https://*.rxo.com https://*.licdn.com https://*.clarity.ms https://*.ads-twitter.com https://*.facebook.net https://*.facebook.com https://*.hotjar.com https://*.demandbase.com https://*.stackadapt.com https://*.doubleclick.net https://*.zoominfo.com https://cdn.redoc.ly; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://*.hotjar.com https://*.stackadapt.com https://*.rxo.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https: data: b
strict-transport-security: max-age=300