cardchaos.app

.app crawl

First seen 2026-04-24 · Last seen 2026-05-15 · ok HTTP/1.1 200 16168 ms crawled 2026-05-18

US · 35.219.200.9 · AS15169 Google LLC

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Card Chaos OS
Description
The central nervous system for a modern TCG store.
Language
en

Technology

Server
envoy
CMS
Next.js
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.googleapis.com×2
  • fonts.gstatic.com×1

DNS records live

NS
  • ns01.domaincontrol.com
  • ns02.domaincontrol.com
TXT
  • fah-claim=002-02-276b12c8-7d89-48fb-98b7-517b25654e27

Email authentication no MX

SPF
not published
DMARC
v=DMARC1; p=reject; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net;
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

WR3
from 2026-04-02 to 2026-07-01
Expires in 42 days

HTTP security headers

Header hygiene 30/100 Checked live page: https://cardchaos.app/login

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Linked from (1)