buddy.net

.net crawl

First seen 2026-04-24 · Last seen 2026-05-15 · ok HTTP/1.1 200 13660 ms crawled 2026-05-18

FR · 51.38.47.182 · AS16276 OVH SAS

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: BUDDY: Meet gay men near and far
Description: Love hot guys? Meet & chat with men and share your videos in Europe's hottest gay app. It's fast and free. If you want fun, come and join Buddy.net!
Language: en

Open Graph

url: https://buddy.net
title: BUDDY: Meet gay men near and far
site name: BUDDY.net
description: Love hot guys? Meet & chat with men and share your videos in Europe's hottest gay app. It's fast and free. If you want fun, come and join Buddy.net!

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (3)

static.zdassets.com×1
www.google.com×1
www.googletagmanager.com×1

Registration

Registrar

Gandi SAS

Created

1997-03-12

Expires

2027-03-13 297 days left

Updated

2026-01-12

Name servers

ns-134-b.gandi.net
ns-181-a.gandi.net
ns-94-c.gandi.net

DNS records live

NS

ns-134-b.gandi.net
ns-181-a.gandi.net
ns-94-c.gandi.net

MX

10 spool.mail.gandi.net
50 fb.mail.gandi.net

TXT

google-site-verification=xIqHBLKVGWLzmCHyy5mkoyzTtaCx5kcJyFydwuduW_U
zone-ownership-verification-092a6d43574b243325485cbffac63d5e10692cf53dfeafddad83cc97f4940c28

Email authentication partial

SPF: v=spf1 include:_mailcust.gandi.net include:mail.zendesk.com include:sparkpostmail.com ip4:217.182.81.217 include:_spf.mailersend.net ~all
softfail (~all)
DMARC: v=DMARC1; p=none
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-05-15 to 2026-08-13

Expires in 86 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://buddy.net/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: blob: 'self' 'unsafe-eval' 'unsafe-inline'; script-src https: blob: 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com; frame-src https: blob: 'self' www.google.com www.gstatic.com; object-src blob:; font-src buddy.net *.buddy.net fonts.gstatic.com data: blob:; connect-src buddy.net *.buddy.net *.buddy.net:2052 *.buddy.net:2053 *.google-analytics.com *.nr-data.net *.newrelic.com onesignal.com *.onesignal.com *.openstreetmap.org *.zendesk.com *.zdassets.com blob: wss: ws:; img-src https: data: blob:;
strict-transport-security: max-age=63072000; includeSubDomains; preload;

Linked from (1)

jamiehp.co.uk×2