ellesho.me

.me crawl

First seen 2026-04-11 · Last seen 2026-04-30 · ok HTTP/1.1 200 974 ms crawled 2026-05-18

US · 104.21.0.219 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title

elle's homepage / start

Description

this is elle's homepage. my home on the internet. i like to make stuff with html and i will put some of it on here

Language

Canonical

https://ellesho.me/page

Feeds

Open Graph

url: https://ellesho.me/page
title: elle's homepage
site name: elle's homepage
description: elle's hypertext stuff

Technology

CDN: Cloudflare

Third-party hosts loaded (10)

webmention.io×2
aperture.p3k.io×1
bg.raindrop.io×1
ellebowmacaroni.tumblr.com×1
github.com×1
gravatar.com×1
indieauth.com×1
mastodon.social×1
openid.indieauth.com×1
tokens.indieauth.com×1

DNS records live

NS

ainsley.ns.cloudflare.com
lloyd.ns.cloudflare.com

TXT

Show 6 TXT records

keybase-site-verification=i3ecwlm5QUP-F6pdlgH4mCHhmyPa_6zrpZsJC1vF4Lw
openpgp4fpr:A2FC0B11104E1AA47ABA7289EC6F310E8288CD46
openpgp4fpr:e11e3146fb2017e4f9299fcf44892a5a3338e11e
openpgp4fpr:e11eee03363c3fc827fae4d5f8b3b43e65f2e11e
aspe:keyoxide.org:FTDGKCW563NFYXAMVEORH7577I
google-site-verification=E0Ev7GW5fN0_QllrbmR2-SLX3RHMVvR7yYxlqlD82K8

Email authentication no MX

SPF

v=spf1 -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;

policy: reject (enforced) · sp=reject

DKIM

default: v=DKIM1; p=
google: v=DKIM1; p=
selector1: v=DKIM1; p=
selector2: v=DKIM1; p=
k1: v=DKIM1; p=
k2: v=DKIM1; p=
mail: v=DKIM1; p=
dkim: v=DKIM1; p=
s1: v=DKIM1; p=
s2: v=DKIM1; p=
mxvault: v=DKIM1; p=
smtpapi: v=DKIM1; p=

selectors probed

Certificate (current)

WE1

from 2026-04-17 to 2026-07-16

Expires in 58 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://ellesho.me/

present

x-content-type-options
referrer-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff