scepman.com

.com crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 1015 ms crawled 2026-05-30

US · 52.8.178.132 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: SCEPman: Cloud-Based Certificate Authority | scepman-nuxt-app
Description: SCEPman is a cloud-based CA for Intune and Jamf. Issue certificates for Wi-Fi, servers, and IoT devices with real-time revocation.
Language: en
Canonical: https://www.scepman.com/

Open Graph

url: https://www.scepman.com/
title: SCEPman: Cloud-Based Certificate Authority
locale: en
site name: SCEPman
description: SCEPman is a cloud-based CA for Intune and Jamf. Issue certificates for Wi-Fi, servers, and IoT devices with real-time revocation.

Technology

CDN: Cloudflare
CMS: Nuxt
JS framework: Nuxt

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (4)

res.cloudinary.com×63
i1.ytimg.com×5
www.googletagmanager.com×2
static.cloudflareinsights.com×1

Social

Contact

Email

Registration

Registrar

GoDaddy.com, LLC

Created

2019-02-02

Expires

2027-02-02 246 days left

Updated

2026-01-23

Name servers

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

DNS records live

NS

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

MX

1 smtp.google.com

TXT

www-scepman-com.azurewebsites.net

Verified for

Google

Email authentication strong

SPF: v=spf1 include:email.freshdesk.com include:spf.mandrillapp.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; sp=reject; adkim=s; aspf=r
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

ZeroSSL RSA Domain Secure Site CA

from 2026-03-21 to 2026-06-20

Expires in 19 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.scepman.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: NOSNIFF
content-security-policy: default-src 'self'; base-uri 'self'; font-src 'self' data: *.cloudfront.net; form-action 'self'; img-src 'self' data: https: res.cloudinary.com; object-src 'none'; style-src 'self' https: 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.youtube.com *.youtube-nocookie.com *.cloudfront.net *.cloudcannon.com ajax.googleapis.com *.googletagmanager.com gdpr.c4a8.net *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.licdn.com static.cloudflareinsights.com; frame-src *.youtube.com *.youtube-nocookie.com *.googlesyndication.com; media-src 'self'; connect-src 'self' *.google-analytics.com gdpr.c4a8.net cloudflareinsights.com
strict-transport-security: max-age=31536000; includeSubDomains; preload

Links to (19)

Linked from (4)