ammalgam.xyz
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- indie.ns.cloudflare.com
- julio.ns.cloudflare.com
- MX
-
- 10 mail.protonmail.ch
- 20 mailsec.protonmail.ch
- TXT
-
7e744c41-4010-4c87-ba4d-3064a440c68c=bcbfc9fec96c31bb6a1d31c8b9d2fdb4c1001e4eb60d531ef80e863f50c2d7cf7e744c41-4010-4c87-ba4d-3064a440c68c=cd136d379a21c604b9e3be551832db8bf0836e72db24022802536a1c2f2fb1a0protonmail-verification=bbfdc9a27d805521f644af0339b2a82a3c26a706
- Verified for
-
Email authentication strong
- SPF
-
v=spf1 include:_spf.protonmail.ch include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:80e6039f109140d5a473eeaeb752a188@dmarc-reports.cloudflare.net,mailto:dmarc-reports@ammalgam.xyzpolicy: quarantine - DKIM
-
Show 12 DKIM selectors
- default:
v=DKIM1; p=quarantine - google:
v=DKIM1; p=quarantine - selector1:
v=DKIM1; p=quarantine - selector2:
v=DKIM1; p=quarantine - k1:
v=DKIM1; p=quarantine - k2:
v=DKIM1; p=quarantine - mail:
v=DKIM1; p=quarantine - dkim:
v=DKIM1; p=quarantine - s1:
v=DKIM1; p=quarantine - s2:
v=DKIM1; p=quarantine - mxvault:
v=DKIM1; p=quarantine - smtpapi:
v=DKIM1; p=quarantine
selectors probed - default:
Certificate (current)
R12
Expires in 48 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
DENY- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://subscribe-forms.beehiiv.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob: https://*.google-analytics.com https://*.googletagmanager.com; font-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://subscribe-forms.beehiiv.com; frame-src 'self' https://subscribe-forms.beehiiv.com; media-src 'self'; object-src 'none'; frame-ancestors 'self'- strict-transport-security
max-age=63072000
Links to (2)
- x.com×1
- mirror.xyz×1