dcblog.dev
HTML metadata
Technology
- Server
- nginx
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- cdnjs.cloudflare.com×2
- www.googletagmanager.com×1
Social
Contact
- Address
- st updates on my books and digital products.Email addressSubscribe© 2009
DNS records live
- NS
-
- dns1.registrar-servers.com
- dns2.registrar-servers.com
- MX
-
- 0 dcblog-dev.mail.protection.outlook.com
- TXT
-
mailcoach-verification=073120b1-a56b-409a-96fc-76974b1b20begoogle-site-verification=difBkrsjHrOT87o1nd1gsmsN8RuxG9vYvHynd7QabCI
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com -allstrict (-all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc@smtp.mailtrap.live; ruf=mailto:dmarc@smtp.mailtrap.live; rf=afrf; pct=100policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
E7
Expires in 29 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),payment=(self https://*.polar.sh https://polar.sh),publickey-credentials-get=(self https://*.polar.sh https://polar.sh)- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' *.jsdelivr.net *.tailwindcss.com *.cloudflare.com *.paritydeals.com cdn.usefathom.com/script.js *.googletagmanager.com player.vimeo.com/api/player.js platform.twitter.com utteranc.es *.cloudflare.com 'unsafe-inline' 'unsafe-eval' plausible.io/js/plausible.js utteranc.es/client.js; style-src 'self' *.cloudflare.com 'unsafe-inline'; img-src 'self' * data:; font-src 'self' *.cloudflare.com data: ; connect-src 'self' api.pirsch.io *.paritydeals.com *.google-analytics.com plausible.io/api/event; media-src 'self'; frame-src 'self' *.polar.sh polar.sh app.usefathom.com platform.twitter.com plausible.io utteranc.es github.com *.youtube.com *.vimeo.com; object-src 'none'; base-uri 'self'; report-uri- strict-transport-security
max-age=31536000; includeSubDomains
Links to (4)
- github.com×3
- linkedin.com×3
- x.com×3
- youtube.com×3