disneylorcana.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-15 · ok HTTP/1.1 200 3011 ms crawled 2026-05-07

US · 104.18.10.120 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title

Disney Lorcana by Ravensburger | Disney Lorcana by Ravensburger

Description

Official website for Disney Lorcana by Ravensburger

Language

en-US

Canonical

https://www.disneylorcana.com/en-US/

Translations

en-us

Open Graph

url: https://www.disneylorcana.com/en-US/
title: Disney Lorcana by Ravensburger
description: Official website for Disney Lorcana by Ravensburger

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights

Third-party hosts loaded (2)

ravensburger.cloud×19
static.cloudflareinsights.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2021-12-13

Expires

2026-12-13 207 days left

Updated

2025-11-13

Name servers

dawn.ns.cloudflare.com
marvin.ns.cloudflare.com

DNS records live

NS

dawn.ns.cloudflare.com
marvin.ns.cloudflare.com

TXT

google-site-verification=nbFSiRz9QQK9oyY3e7mOyAFQxII88dbUAecq_D1y9ck
google-site-verification=gFLGBuUGZULxQpwFqLTGGG6r1AbL0RzDeeOXw0ldDyY

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-03-24 to 2026-06-22

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.disneylorcana.com/en-US/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; font-src 'self' data: https://ravensburger.cloud https://fonts.googleapis.com https://fonts.gstatic.com https://production-cms.ravensburger.bloomreach.cloud; form-action 'self'; frame-ancestors 'self' https://production-cms.ravensburger.bloomreach.cloud; img-src 'self' blob: data: https://ravensburger.commander1.com https://manager.tagcommander.com https://production-cms.ravensburger.bloomreach.cloud https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://ravensburger.cloud https://mapsresources-pa.googleapis.com https://api.lorcana.ravensburger.com; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://ravensburger.cloud https://fonts.googleapis.com https://production-cms.ravensburger.bloomreach.cloud; script-src 'self' 'unsafe-inline' blob: https://challenges.cloudflare.com https://matomo.ravensburger.com https://cdn.trustcommander.net https://ravensburger.commander1.com https://production-cms.ravensburger.bloomr
strict-transport-security: max-age=15552000; includeSubDomains;
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin