dearuhua.com

.com crawl

First seen 2026-05-09 · Last seen 2026-05-15 · ok HTTP/1.1 200 3107 ms crawled 2026-05-15

US · 198.185.159.145 · AS53831 Squarespace, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: De'Aruhuä Chocolate: Indigenous Origin of Cacao
Language: en-US

Open Graph

url: https://www.dearuhua.com/
title: De'Aruhuä Chocolate: Indigenous Origin of Cacao
description: Indigenous Chocolate™ from the Guardians of the Forest The term "Indigenous chocolate" possesses the capital letter "I" because it represents our Indigenous peoples' (and others') cultural identity and natural history by UNESCO, the OAS, WIPO, the United Nations, and the United States. The term

Technology

Server: ESF

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

lh3.googleusercontent.com×16
fonts.googleapis.com×3
www.gstatic.com×2
apis.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Squarespace Domains II LLC

Created

2019-10-03

Expires

2026-10-03 135 days left

Updated

2025-09-18

Name servers

ns-cloud-d1.googledomains.com
ns-cloud-d2.googledomains.com
ns-cloud-d3.googledomains.com
ns-cloud-d4.googledomains.com

DNS records live

NS

ns-cloud-d1.googledomains.com
ns-cloud-d2.googledomains.com
ns-cloud-d3.googledomains.com
ns-cloud-d4.googledomains.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google
Meta
Yandex

Email authentication strong

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=quarantine; rua=mailto:dmarc-report@dearuhua.com; rf=afrf; pct=100; fo=1; adkim=s; aspf=s

policy: reject (enforced) · sp=quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntpa5vNop8eQn2A3gI9vJBKP+8zW+DqRX09JrcQBSQ0GE8hNGL8cQczS3yHFlnxed7QVLVubgsrHyL…

selectors probed

Certificate (current)

R13

from 2026-03-30 to 2026-06-28

Expires in 39 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.dearuhua.com

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-OoitZ9sYFpSpALayfbocSg' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: same-site