walkme.com
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- OneTrust
Third-party hosts loaded (5)
- cdn.parsely.com×2
- stats.wp.com×2
- cdn.cookielaw.org×1
- js.maxmind.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- Amazon Registrar, Inc.
- Created
- 2002-01-12
- Expires
- 2027-01-12 237 days left
- Updated
- 2026-05-14
- Name servers
-
- ns-1439.awsdns-51.org
- ns-1737.awsdns-25.co.uk
- ns-877.awsdns-45.net
- ns-92.awsdns-11.com
DNS records live
- NS
-
- ns-1439.awsdns-51.org
- ns-1737.awsdns-25.co.uk
- ns-877.awsdns-45.net
- ns-92.awsdns-11.com
- MX
-
- 1 aspmx.l.google.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 32 TXT records
MS=ms28108724mongodb-site-verification=4Mn5TVXzSt6XqcXvHKhEHvsbzQ09ueZigoogle-site-verification=gZVvb0_ftktsPbUWmtZkq_RKcQRkay3QnysxlcvcvcYdocusign=5ccc681a-a4c8-4de9-97b8-2901aeb1fe0cstatus-page-domain-verification=cdms5qp5nd2q00DD0000000rGIZ=1TBR500000000b7hubspot-developer-verification=YjI1N2RkY2QtMWE5NS00OWVmLWEzNTMtYjE5NWRjNzlmZWQymiro-verification=0ccaa6a74300abc24bb86455d8d91cec7058db71google-site-verification=EAmGXJe6CimXj1Etbxlkn2RERpgeufG1ikp6xNtQQy8openai-domain-verification=dv-fcRThVPSHZO7KFFDSxKegqyTpaloaltonetworks-site-verification=586f539694c83479aa1de6f742817f2920cace25edb7d9282cf2d3556310f6bbloaderio=3458d992ba392cb15e55eaac2e32922catlassian-domain-verification=IKekMAaiBZc5NC4Mqam1xjAYi29YeRFgghEIXQCJonos4fE59KuIb3+nM5jM3khqgoogle-site-verification=WsBFMmkqsTFjvgJUZwu0gocXuhxNVoqp5JuUPEt__3santhropic-domain-verification-esta3x=4dG5cBZgNnFQ8qWlDJm3uypjrgoogle-site-verification=rV6F-jVx0eyxMWh-RVw7hW6qHFYV4e6LyWNzX1AEWL0cursor-domain-verification-v42792=sVktfgT9vOekNgl1yeK4BnHhJcursor-domain-verification-wn8n24=CG7JDj49xM2kWX87uqBtF337bsending_domain169332=a741d5539d5ca1cf781e7abaf14deeaedb76a614fdc3842f9b1003140ef42754anthropic-domain-verification-t1mq3c=Ffu4HUVlkhNugp2PGlQMDK3o1google-site-verification=I4f_84n0-dYh94ePEw6jDMfQNsmviANw_NziKxWueDsgoogle-site-verification=YfqJq7EK29AaFwfv4PpxcR_EYykT6omeBQ1Bw90RVHwgoogle-site-verification=R3cNnMwli9WwTkmWtRDPJuvz5ct7dQ9iQSC7G6xlcQgzoom-domain-verification = ea9e0cb7-a1a4-4353-b9ff-a5fc7b70b7d6apimuid.ai-hub.walkme.com=gBAQ00Mi0DguyVhfqfvCDV88ty4JxG9gXT6XGwnU3pgloaderio=76834c1e3851f28509d0ee94bd12ffc000dd0000000rgizma2anthropic-domain-verification-xw7emz=Z9qqRcuwXGqVVeChP1fh4fTKcatlassian-domain-verification=k+OTH572IUFuLdF/rYKBxbjC28OjN/shEeDJGehgJLjLjWO20eBqV2K2xFsNRIEkoAQIK6_r2-el3CuxRQ_8Ng14eTSZuVIpardot169332=2e213c70da730127c07824627d554421940b895cfbb9943db657b94df0cdb9b0google-site-verification=pSidJAYc_r4YJ23wfrs4BulmHeMvxd1x1DQhLjDxyYc
Email authentication strong
- SPF
-
v=spf1 ip4:167.89.67.29 ip4:168.245.13.188 ip4:136.147.129.127 include:amazonses.com include:_spf.google.com include:_spf.salesforce.com include:et._spf.pardot.com include:mailer.eu-auth.walkme.com include:_s00617645.autospf.email -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:securityteam@walkme.com, mailto:it.notifications@walkme.com; pct=100; adkim=r; aspf=rpolicy: quarantine - DKIM
-
Show 4 DKIM selectors
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIpWgyzGLNpCK1gP1agfYbPG9p2PFlfKNs16/K6CBtuukPRYG/C+RjBm44K+ay3uAKt0WXK3SCBvgO… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf+uYw+fYBQGsbUmg5k6A552F2eusiK2ytptcLQY45mrLh7pgQzNpyr1YBLwbMAjHDLJQek3xcBAgpa0pC… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDkdB53C3fStFpuP36H/MH9BLzfUTxV65y8ANRCs/AI8sWSY+S4Q/nDmtPhYL1aUHpw2tMKOuTjEOxwHW3pcmzMmz…
selectors probed - google:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 277 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
DENY- permissions-policy
geolocation=(), microphone=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; media-src 'self' blob: player.vimeo.com app.qualified.com *.walkmeqa.com *.walkme.com; worker-src 'self' blob: ; child-src 'self' blob: ; script-src 'self' blob: data: static.ads-twitter.com bat.bing.com maxcdn.bootstrapcdn.com www.googleadservices.com connect.facebook.net snap.licdn.com www.googletagmanager.com code.jquery.com ajax.aspnetcdn.com 'unsafe-inline' 'unsafe-eval' js.maxmind.com player.vimeo.com www.youtube.com www.google.com cdn.cookielaw.org geolocation.onetrust.com cdnjs.cloudflare.com www.gstatic.com cdn.jsdelivr.net js.zi-scripts.com tracking.g2crowd.com js.adsrvr.org j.6sc.co cdn.userway.org js.qualified.com js.chilipiper.com ws-assets.zoominfo.com www.google.com assets.trendemon.com trackingapi.trendemon.com googleads.g.doubleclick.net maps.googleapis.com platform.twitter.com ajax.googleapis.com fast.wistia.net www.google.com tags.clickagy.com pi.pardot.com *.walkmeqa.com *.walkme.com www.gstatic.com s.yimg.jp *.yahoo.co.jp *.influ2.com www.redd