indexo.dev

bomabesthub.com

.com crawl

First seen 2026-05-02 · Last seen 2026-05-09 · ok HTTP/1.1 200 400 ms crawled 2026-05-09

US · 13.33.235.65 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Loading...
Language
en

Technology

CDN
Amazon CloudFront
Server
CloudFront
CMS
Gatsby

Registration

Registrar
Rebel Ltd
Created
2022-07-14
Expires
2026-07-14 56 days left
Updated
2025-07-15
Name servers
  • dns.rebel.ca
  • dns2.rebel.ca

DNS records live

NS
  • ns-1200.awsdns-22.org
  • ns-1889.awsdns-44.co.uk
  • ns-294.awsdns-36.com
  • ns-948.awsdns-54.net
CNAME
  • d19gt0r0kl3uc.cloudfront.net

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04
from 2025-09-27 to 2026-10-27
Expires in 161 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://bomabesthub.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(), autoplay=(), camera=(self), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; media-src 'self' blob: https://d19gt0r0kl3uc.cloudfront.net https://*.s3.amazonaws.com; script-src 'self' *.cloudfront.net *.sentry.io *.api.mapbox.com; style-src 'self' 'unsafe-inline' https://api.mapbox.com; img-src 'self' https://api.mapbox.com *.cloudfront.net data: blob: https://bomabestfieldguide.org/ https://fr.bomabest.org/ https://bomabest.org/; connect-src 'self' *.cloudfront.net *.sentry.io blob: wss: https://api.mapbox.com https://events.mapbox.com https://fr.bomabest.org; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://api.mapbox.com; child-src 'self' *.cloudfront.net; worker-src 'self' blob:;
strict-transport-security
max-age=31536000; includeSubDomains; preload

Linked from (2)