sonicjobs.com

HTML metadata

Title: SonicJobs - Verified candidates delivered straight to your ATS
Description: SonicJobs has built the only integrated apply across search and social that drives quality applications directly to your ATS. No tech lift required
Language: en
Canonical: https://www.sonicjobs.com/us

Open Graph

url: https://www.sonicjobs.com/us
title: SonicJobs - Verified candidates delivered straight to your ATS
locale: en-US
site name: SonicJobs
description: SonicJobs has built the only integrated apply across search and social that drives quality applications directly to your ATS. No tech lift required

Technology

CDN: Amazon CloudFront
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Contact

Email

Registration

Registrar

NameCheap, Inc.

Created

2008-02-28

Expires

2027-02-28 284 days left

Updated

2026-03-01

Name servers

ns-1296.awsdns-34.org
ns-1818.awsdns-35.co.uk
ns-337.awsdns-42.com
ns-738.awsdns-28.net

DNS records live

NS

ns-1296.awsdns-34.org
ns-1818.awsdns-35.co.uk
ns-337.awsdns-42.com
ns-738.awsdns-28.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 7 TXT records

google-site-verification=72lb3ly4eAPoxUWWcMBTuJeZrx859JkWfDNGEPajcKQ
google-site-verification=9fvlUcyeWsYanVRiPWBnsrPHB-Nn-gjNYbUYikoG2Y8
google-site-verification=ConA9hw6PXNGPOKW7ECW1LZXDb1Y6oD26L2ftpyWwkw
google-site-verification=Mtp8gNRf3bIw8YD8uD7p9k-FH2I43b2f3R9WgLY0K9I
google-site-verification=POT-VtXMfqkiQN-u9Mr5yXZaqsNpto3RabpUrfYX20Q
google-site-verification=zvkyPW7HByYRPCp9V4pUjBEBvU8ZMd-8uzKgVlfA7kg
facebook-domain-verification=bzlchc2nigbn1svbquqtxesy80xca2

Email authentication strong

SPF

v=spf1 mx ip4:108.128.109.78 include:_spf.google.com include:sendgrid.net ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKCkgpthSmqdDndcOO3bqHDH8fZo78TZ05gKhzDWt0mZPEcfwewiOQmkObZsnoVLJGb/xP2qRV++T6…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-10-09 to 2026-11-08

Expires in 172 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.sonicjobs.com/us

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: default-src 'self' data: gap: content:; style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com *; child-src 'self' www.facebook.com accounts.google.com blob: gap:; frame-src 'self' accounts.google.com facebook.com www.facebook.com form.typeform.com www.youtube-nocookie.com https://optimize.google.com https://td.doubleclick.net/ https://player.vimeo.com; connect-src 'self' data: conversion.allthetopbananas.com www.google-analytics.com region1.google-analytics.com region1.analytics.google.com https://analytics.google.com/ api2.branch.io stats.g.doubleclick.net wa.onelink.me api-js.mixpanel.com optimize.google.com maps.googleapis.com facebook.com *.gstatic.com www.facebook.com graph.facebook.com accounts.google.com *.clarity.ms *.sonicjobs.net *.analytics.google.com vimeo.com *.google.co.uk *.google.ie *.google.it *.redditstatic.com *.reddit.com *.sonic-local.com *.sonic-dev.net; img-src 'self' data: joblookup.com click.appcast.io i.ytimg.com p.nexxt.com
strict-transport-security: max-age=6307200; includeSubDomains; preload

Linked from (1)

deamcon.org×1