indexo.dev

caamagazine.com

.com crawl

First seen 2026-05-08 · Last seen 2026-05-08 · ok HTTP/1.1 200 1598 ms crawled 2026-05-15

US · 147.154.3.128 · AS31898 Oracle Corporation

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Language
en

Technology

CDN
Netlify
Server
ZENEDGE
CMS
Next.js

Registration

Registrar
MarkMonitor Inc.
Created
2007-01-29
Expires
2028-01-29 619 days left
Updated
2025-12-28
Name servers
  • ns1.markmonitor.com
  • ns2.markmonitor.com
  • ns3.markmonitor.com
  • ns4.markmonitor.com
  • ns5.markmonitor.com
  • ns6.markmonitor.com
  • ns7.markmonitor.com

DNS records live

NS
  • ns1.markmonitor.com
  • ns2.markmonitor.com
  • ns3.markmonitor.com
  • ns4.markmonitor.com
  • ns5.markmonitor.com
  • ns6.markmonitor.com
  • ns7.markmonitor.com
MX
  • 10 caamagazine-com.mail.protection.outlook.com
TXT
  • MS=ms27700188
  • google-site-verification=LvQ-XTU22ircFDuS1bgdKJ4zCWmIORIOMdnZzd0fPgY

Email authentication weak

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
not published
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpiyo4G8a+DatxpAzHPPi7gS6fY1rUB2cVqwkdDhR57k3fL1ZVAQRd4L+GYYyAdtT2eMvIyt10Mff8…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xXZ96R14xlhkBPzIDnzmL1z1Ko+WXLaKHtcMLy2kw40K4WVc/v1RGxEqw5kBCw9UGgwLOnCUA/khy…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36
from 2026-03-09 to 2027-03-10
Expires in 294 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://caamagazine.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
DENY
permissions-policy
accelerometer=(), camera=()
x-content-type-options
nosniff
content-security-policy
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline' blob:; style-src https: 'unsafe-inline'; connect-src ws: https: wss:; img-src https: data: *; font-src https: data:; frame-ancestors 'self'
strict-transport-security
max-age=15552000; includeSubDomains; preload

Linked from (1)