wheelpros.com

HTML metadata

Title: Designed for the Industry’s Best, by the Industry’s Best | Wheel Pros
Description: Headquartered in Denver, Colorado, Wheel Pros is a leading designer, marketer, and distributor of branded aftermarket wheels.
Language: en
Canonical: https://www.wheelpros.com/

Open Graph

url: https://www.wheelpros.com/
title: Home

Technology

CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (3)

rum.hlx.page×1
static.klaviyo.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1998-09-16

Expires

2029-09-15 1214 days left

Updated

2024-07-17

Name servers

ns-1234.awsdns-26.org
ns-1612.awsdns-09.co.uk
ns-839.awsdns-40.net
ns-94.awsdns-11.com

DNS records live

NS

ns-1234.awsdns-26.org
ns-1612.awsdns-09.co.uk
ns-839.awsdns-40.net
ns-94.awsdns-11.com

MX

10 us-smtp-inbound-1.mimecast.com
20 us-smtp-inbound-2.mimecast.com

TXT

Show 12 TXT records

google-site-verification=8Kfx1l76z2fTqwF-BG5Ac0QRJJB-7cYlcQSaP7LyNOI
google-site-verification=uGtBA8QaVWP08e2wZOpsQbvM_CVg0koQjV21HS5uW44
klaviyo-site-verification=Wufc3E
klaviyo-site-verification=XCaApN
openai-domain-verification=dv-fsb6Y7CTfEdv0DdRBsUm0nsl
postman-domain-verification=e8599f69773b156e2cdec999cc17da937573db6c24bfbad82e42a320b2d85caa3f7d88009ee3d69dcd449a34c1093464e715ed91a4cf4b48ff59e1f3ad3b8dd8
pzhpJG6i0ymelqSvr6r1aakD4U/eUhaT1Ha9qQ6EN7bfCbV3hUEievXxEoBKQFPpjpAIeX/LZsKup9zaU0eO4A==
rdb609b9sedqeiu029fgfsodai
teamviewer-sso-verification=8e2e6e3935a748a38317bbc9f577c611
_mxgeo3rqvst46lxa6pdudkxc5ufyn6f
apple-domain-verification=EZbIvI99xK42LXNd
d52rzjdd62rw1z6ncth527rj9gxrtlgh

Email authentication strong

SPF

v=spf1 redirect=6nvttizi._spf._d.mim.ec

no all qualifier

DMARC

v=DMARC1; p=reject; rua=mailto:25ebd622edce132@rep.dmarcanalyzer.com; ruf=mailto:25ebd622edce132@for.dmarcanalyzer.com; fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCsgAh05tq5MXEEnGC4njw5DKd/GWEq6S1+1oRdWgEcRhYLuKdvw9dVY0zHGFzBrpeD4jys9qKIh1WahoE3uw…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

R12

from 2026-05-15 to 2026-08-13

Expires in 85 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.wheelpros.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: *.typekit.net *.audioeye.com cdn.shopify.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'self' 'unsafe-inline'; frame-ancestors *.googletagmanager.com *.gstatic.com *.jst.ai ajax.googleapis.com *.affirm.com *.launchdarkly.com connect.facebook.net *.audioeye.com *.imgur.com web.hyro.ws wss://web.hyro.ws 'self'; frame-src f
strict-transport-security: max-age=31536000