defencecollectivesg.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-19 · ok HTTP/1.1 200 1568 ms crawled 2026-05-18

SG · 47.130.246.102 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Home | My Website
Description: This is the homepage of the website
Language: en-US
Generator: Odoo
Canonical: https://defencecollective.run-odoo.com/

Open Graph

url: https://defencecollective.run-odoo.com/
title: Home | My Website
site name: My Website
description: This is the homepage of the website

Technology

Server: run-odoo.com
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

defencecollective.run-odoo.com×3
fonts.gstatic.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

83331226

Registration

Registrar

Web Commerce Communications Limited dba WebNic.cc

Created

2022-12-02

Expires

2026-12-02 195 days left

Updated

2026-04-24

Name servers

addyson.ns.cloudflare.com
lewis.ns.cloudflare.com

DNS records live

NS

addyson.ns.cloudflare.com
lewis.ns.cloudflare.com

MX

10 cluster5.us.messagelabs.com
20 cluster5a.us.messagelabs.com

TXT

S0I1N25433

Verified for

Google
Microsoft 365

Email authentication strong

SPF: v=spf1 ip4:61.16.118.131 include:spf.protection.outlook.com include:spf.messagelabs.com include:spf.zohomail360.com ~all
softfail (~all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:stanley_tong@defencecollectivesg.com;
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

from 2026-04-26 to 2026-07-25

Expires in 65 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://defencecollectivesg.com/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self),midi=(self),sync-xhr=(self),microphone=(self),camera=(self),magnetometer=(self),gyroscope=(self),fullscreen=(self),payment=(self)
x-content-type-options: nosniff, nosniff
content-security-policy: default-src * data: blob:; font-src *;img-src * data: blob:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; frame-src *

Links to (2)

linkedin.com×2
odoo.com×1