scienceopen.com

.com crawl

First seen 2026-04-12 · Last seen 2026-05-17 · ok HTTP/1.1 200 2559 ms crawled 2026-05-04

US · 108.179.34.135 · AS6128 Cablevision Systems Corp.

Reputation 100/100

Classifying

HTML metadata

Title: ScienceOpen
Language: en

Technology

Server: WildFly
CMS: WordPress

Analytics

Google Tag Manager

Social widgets

Vimeo Embed

Third-party hosts loaded (4)

cdnjs.cloudflare.com×1
d1bxh8uas1mnw7.cloudfront.net×1
player.vimeo.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

Address

ScienceOpen, Inc.infoo83ooc@o83onsscienceopen.comOnline servicesBoston131 Hartwell Ave., Suite 210Lexington, MA 02421USAPhone:+1 781-222-5200PublisherBerlinPappelallee 78/7910437 BerlinGermanyPhone:+49-30-609-8490-277

Registration

Registrar

GoDaddy.com, LLC

Created

1999-06-09

Expires

2026-06-09 21 days left

Updated

2025-06-10

Name servers

pdns03.domaincontrol.com
pdns04.domaincontrol.com

DNS records live

NS

pdns03.domaincontrol.com
pdns04.domaincontrol.com

MX

0 scienceopen-com.mail.protection.outlook.com

TXT

google-site-verification=-P98cv3EDizmu4bn8GnCbLx5qoAM0DYbbyO6HHwgKU4
google-site-verification=-_Rzflaj5HbbLrvRdy7tmLscmrjqgIa_Lw7DoJJfo2Y
v=spf1 include:spf.protection.outlook.com include:sendgrid.net -all

Certificate (current)

from 2026-03-18 to 2026-06-16

Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://www.scienceopen.com/

present

content-security-policy
x-frame-options
referrer-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self' twitter.com *.twitter.com www.youtube.com player.vimeo.com; connect-src 'self' *.pingdom.net api.crossref.org api.ror.org www.google-analytics.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com scienceopen.matomo.cloud api.scite.ai arxiv.org api.bsky.app api.unpaywall.org; font-src 'self' cdnjs.cloudflare.com cdn.scite.ai; frame-ancestors 'self' twitter.com; img-src 'self' blob: data: *.scienceopen.com *.cloudfront.net cdnjs.cloudflare.com twitter.com *.twitter.com *.twimg.com www.google-analytics.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com cdn.scite.ai cdn.bsky.app; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.scienceopen.com *.twitter.com *.twimg.com *.pingdom.net api.altmetric.com embed.altmetric.com cdnjs.cloudflare.com *.cloudfront.net www.google-analytics.com ssl.google-analytics.com *.googletagmanager.com cdn.matomo.cloud