xpansiv.com

HTML metadata

Title: Global Platform for Energy & Environmental Markets - Xpansiv
Language: en
Canonical: https://www.xpansiv.com/

Open Graph

url: https://www.xpansiv.com/
title: Trade, track, and scale environmental markets with Xpansiv.
site name: Xpansiv
description: Xpansiv connects global carbon, energy, and environmental markets – enabling trading, data insights, and scalable sustainability solutions.

Technology

CDN: Azure Front Door
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (3)

cdn-cookieyes.com×1
px.ads.linkedin.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2016-02-15

Expires

2028-02-15 637 days left

Updated

2025-11-11

Name servers

ns-1144.awsdns-15.org
ns-1709.awsdns-21.co.uk
ns-30.awsdns-03.com
ns-582.awsdns-08.net

DNS records live

NS

ns-1144.awsdns-15.org
ns-1709.awsdns-21.co.uk
ns-30.awsdns-03.com
ns-582.awsdns-08.net

MX

1 xpansiv-com.mail.protection.outlook.com

TXT

Show 20 TXT records

pardot1005562=a35dc6ad0def0c4a6e026d7dc85b570a71700971a8e94963c61fb640847ff301
sending_domain1005562=07b6d16895f43f59a266d167570c79c43979ac67f2cc31cbf4cbe3860d203337
ZOOM_verify_BC1kr0JvEv95pnPYA0uZt3
new: 35.196.223.187
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCJHkXZVRrHFW4JMWSf69g9mIPWrMpDCVLVvl4z25/Mnrjk5Zdo4l6Rac6CRlBuPUoG9Q2RLCu0GP8wn7vCGO/HbNjdFrPDhCcWbB123tg7t2x3eFVJz5gAJm4O8EiGKWwdNSLZwHCrvmuor1lQ6muVSKPu+OXoIwZFwdkJmIKBYJ3b41njd6PTEihaug0PR0PSDoJv5YoLzWZ0Pj5ddLYX6rwlUdqoP/A+lG6fE3gc6sSnLbBEjJ4xlFinDKUg0dECSDF8+rc/TJJDn9cOY5HdAZDXlTTYOcw7Tl/O0X7qRn/MzE7oW6oPAVAl3umQljkBkgvsOVNrV+GQuuB68IQIDAQAB
atlassian-domain-verification=PVXHERIaf/KYR2uT4EChZ3Hqx8x95Pexf2RjXbw8cBy3fxiDjBmxg7h9uSmPk+R3
smartsheet-site-validation=XBhHdhZmb7rZslElo_eojVkL611GQsFb
google-site-verification=bhWTBzbWHuD3NCDqtRods4eIZCpM3WxoRmf3-TOUPZI
google-site-verification=b3KyEieFC-x4hR7lKaOITgk453j3sXUdOtVJmGzoPSY
apple-domain-verification=KATAttuKGdBocUnj
cursor-domain-verification-9qa6v6=WdJyGPy9i2UayuEOB5ooOzQPu
box-domain-verification=ae8ff6758d82c00c55ce47cd6bc2ba0152ca293891b0831c6a8b8b3bbf153d13
google-site-verification=0SDUMx-ACWj3TjPNVzBLw04C9XCYFJ328qd4wCRsIzI
sending_domain296792=751e58eb3c0c9226ecb6b23dd898aedd2945f47dcfb869e9876e3fa269d08152
asv=14597d3d369f9d62bccf1d14813fdbdb
MS=ms73509066
pardot1005562=a4ae8f4d2ab3009655d2f630bb4e72ef88711975532230ec01be031261a929ed
google-site-verification=42OJOG2fFsIsO1afQE9kNg3wMAiS46gd5gS2RNv4xAk
l3j07l9lr43drw2zkg5l9hmqd1f2hk71
pardot296792=ddc3d6f3bed561f6445ec62a4eb3e8ecf05d071cf3519cbac09a68278b00f627

Email authentication strong

SPF

v=spf1 +a +mx include:servers.mcsv.net include:spf.protection.outlook.com include:mail.zendesk.com include:aspmx.pardot.com include:_spf.salesforce.com include:ses.onsolve.net ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@xpansiv.com; adkim=r; aspf=r

policy: quarantine

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynrop3cCQD7EV12qRY9R+z51OFS6PbJ/l/xGFNnB+GmfyHINzC0Uaot3fPJfpu7TVhY9Fa5ie9rITR…
google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCJHkXZVRrHFW4JMWSf69g9mIPWrMpDCVLVvl4z25/Mnrjk5Zdo4l6Rac6CRlBuPUoG9Q2RLCu0GP8…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ifRlGV4AT1GUcdKlyrXevd0JrFhwXXTlbksTsctdoOR+tE8yWny2kbknAlbfaRJWxqJarsOkHMCD/…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
dkim: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDzpFrEAH9dbkLukLvwesHGWRDc+JCBkvzQYTpptOR+uz4brRd1V8VDPHPpQH7wRvNMhVh/LhTkPMBXtpJjeedqU2rfDl…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVOKy8OlBxBDB6L5l0dID9BrmjtuiuqfUL1CuOWR3sOg1yDi8m+ZZKM6+AUzthnX6XJrQo4Q6yO2LBhCTV…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJMrv/mNB7KJZ1rJRGG3TmxwaX4IoiyXaTADlmbIdKqLB/dONKUIGVUBOhdDVeF9P2dYLulI/sAbKsAg3IYKEVax…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-03-25 to 2026-10-09

Expires in 143 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.xpansiv.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=(), interest-cohort=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn-cookieyes.com https://js.zi-scripts.com https://snap.licdn.com; style-src 'self' 'unsafe-inline' https://cdn-cookieyes.com; img-src 'self' data: https: blob:; font-src 'self' data:; media-src 'self' https://xpansiv1.wpenginepowered.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.srectrade.com https://api.lever.co https://xpansiv1.wpenginepowered.com https://go.xpansiv.com https://api.xsignals.xpansiv.com https://xpansiv.com https://cdn-cookieyes.com https://log.cookieyes.com https://js.zi-scripts.com https://ws.zoominfo.com https://px.ads.linkedin.com; frame-src https://www.googletagmanager.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload