wave.com

HTML metadata

Technology

Server

UploadServer

CMS

Hugo 0.85.0

jQuery

3.4.1 known XSS (<3.5)

Analytics

• Plausible

Fonts

• Google Fonts

Third-party hosts loaded (5)

• cdn.jsdelivr.net×2
• code.jquery.com×1
• fonts.googleapis.com×1
• plausible.io×1
• stackpath.bootstrapcdn.com×1

Registration

Registrar

MarkMonitor Inc.

Created

1997-03-03

Expires

2027-03-04 273 days left

Updated

2026-01-31

Name servers

• ns-cloud-d1.googledomains.com
• ns-cloud-d2.googledomains.com
• ns-cloud-d3.googledomains.com
• ns-cloud-d4.googledomains.com

DNS records live

NS

• ns-cloud-d1.googledomains.com
• ns-cloud-d2.googledomains.com
• ns-cloud-d3.googledomains.com
• ns-cloud-d4.googledomains.com

MX

• 1 aspmx.l.google.com
• 10 aspmx2.googlemail.com
• 10 aspmx3.googlemail.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

TXT

Show 4 TXT records

• jamf-site-verification=o-hJbZ6ThpBlMmLV6CIN2Q
• sophos-domain-verification=2608cd5b786372f4837523826368892b9c55753435dc5a2b4769de6e58a2133f
• jib3sc39dq3oaq14cdu629rhk2
• heroku-verify-rV0Jv8vL5hQciMVKzrM66JRVNTeIXS7WXGQx8a8UWHcu

Verified for

• Anthropic
• Apple
• Dropbox
• Google
• Microsoft 365
• MongoDB
• OpenAI
• Zoom

Email authentication strong

SPF

v=spf1 ip4:166.78.71.191/32 include:_spf.google.com include:mailgun.org include:spf.mandrillapp.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:kixmn2p0@ag.dmarcian.com, mailto:e0f64107c654003@rep.dmarcanalyzer.com,mailto:davids@wave.com; ruf=mailto:kixmn2p0@fr.dmarcian.com; adkim=s; aspf=s; fo=0:1;

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

• google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDaRjsRJOUS9y4O3QCvSxAy12y9hnIQoOAdEYx6ew+wieclZmKyE29iPsnvA2e8lzlnFLxarMTW5Uhxw5Qkt3…
• k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQl8vCno0B87homdujqkG+NUTuu4GAZ5TQedrrLfFoLwQ4l898lBli2YwlohBgwiBev26iHSEOx5aIfVRi…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcv0bS/z7/TjOwcl5aT+/INQt94r7AVgd9vOpYWuFwkInPEe3h0ud0U1h2OZxm0FcNsQEgZ6err+Fozg/e…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.wave.com/en/

present

• strict-transport-security

findings

• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (2)

• apple.com×3
• google.com×3

Linked from (2)

• acesounderglass.com×2
• audrey.co×1