chorder.net

HTML metadata

Technology

CDN

Cloudflare

jQuery

3.3.1 known XSS (<3.5)

Analytics

• Cloudflare Insights
• Google Tag Manager

Fonts

• Font Awesome
• Google Fonts

Third-party hosts loaded (5)

• cdnjs.cloudflare.com×10
• fonts.googleapis.com×1
• static.cloudflareinsights.com×1
• use.fontawesome.com×1
• www.googletagmanager.com×1

Social

• github

Registration

Registrar

Cloudflare, Inc.

Created

2014-10-20

Expires

2030-10-20 1598 days left

Updated

2023-01-17

Name servers

• sloan.ns.cloudflare.com
• zod.ns.cloudflare.com

DNS records live

NS

• sloan.ns.cloudflare.com
• zod.ns.cloudflare.com

MX

• 11 route2.mx.cloudflare.net
• 92 route1.mx.cloudflare.net
• 97 route3.mx.cloudflare.net

Email authentication strong

SPF

v=spf1 include:_spf.mx.cloudflare.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;

policy: reject (enforced) · sp=reject

DKIM

Show 12 DKIM selectors

• default: v=DKIM1; p=
• google: v=DKIM1; p=
• selector1: v=DKIM1; p=
• selector2: v=DKIM1; p=
• k1: v=DKIM1; p=
• k2: v=DKIM1; p=
• mail: v=DKIM1; p=
• dkim: v=DKIM1; p=
• s1: v=DKIM1; p=
• s2: v=DKIM1; p=
• mxvault: v=DKIM1; p=
• smtpapi: v=DKIM1; p=

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://chorder.net/

present

• x-content-type-options
• referrer-policy

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing Permissions Policy

Links to (3)

• outdatedbrowser.com×1
• hexo.io×1
• github.com×1

Linked from (1)

• 102no.com×1