smapply.io

.io crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 944 ms crawled 2026-05-18

CA · 15.222.117.247 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Log in -

Technology

Server: nginx

Third-party hosts loaded (2)

d1cql2tvuevqx5.cloudfront.net×8
www.surveymonkey.com×1

DNS records live

NS

pdns11.domaincontrol.com
pdns12.domaincontrol.com

MX

10 us-smtp-inbound-1.mimecast.com
10 us-smtp-inbound-2.mimecast.com

TXT

MS=ms60328728
google-site-verification=FP_misfjRSuG5ptd4xFNpTZTbfCbrpjy4Np6aqJ56M8

Email authentication partial

SPF

v=spf1 include:spf.mailjet.com include:_spf.salesforce.com ip4:72.55.140.81 ip4:74.125.82.178 ip4:208.78.97.174 ip4:67.207.144.191 a mx ptr include:aspmx.googlemail.com include:mail.zendesk.com include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email;

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qzkwgrTWBsfwE9XcNZjhHYvnO+Lu3PGcPHX3T6iHJ43zZqlhT/lW5ch8iC5KkUeBdlOeCtoxxaJM2…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2026-04-29 to 2026-11-13

Expires in 178 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://smapply.io/acc/l/?next=/

present

strict-transport-security
x-frame-options
referrer-policy
cross-origin-opener-policy

findings

missing Content Security Policy
weak frame protection
missing content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY, SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin