faproulette.co

.co crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 506 ms crawled 2026-05-18

US · 104.26.12.20 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Fap Roulette - Let the dice decide your pleasure!
Description: Let your fap session be decided for you! Press Roll and let the fun begin. Oh, and you better do what it says.
Language: en
Canonical: https://faproulette.co

Open Graph

url: https://faproulette.co
title: Fap Roulette - Let the dice decide your pleasure!
site name: Fap Roulette
description: Let your fap session be decided for you! Press Roll and let the fun begin. Oh, and you better do what it says.

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights

Third-party hosts loaded (3)

cdnjs.cloudflare.com×1
challenges.cloudflare.com×1
static.cloudflareinsights.com×1

Social

DNS records live

NS

megan.ns.cloudflare.com
walt.ns.cloudflare.com

MX

10 mx.zoho.com
20 mx2.zoho.com
50 mx3.zoho.com

Verified for

Google

Email authentication strong

SPF: v=spf1 include:zoho.com include:sendgrid.net -all
strict (-all)
DMARC: v=DMARC1; p=reject; sp=reject; rua=mailto:97c1112200674927b0993ddd024eda14@dmarc-reports.cloudflare.net,mailto:contact@mysterymedia.org; ruf=mailto:contact@mysterymedia.org; adkim=s; aspf=r;
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-09 to 2026-07-09

Expires in 49 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://faproulette.co/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: autoplay=*, camera=*, display-capture=*, fullscreen=*, microphone=*, payment=*, sync-xhr=*, web-share=*, clipboard-write=*
x-content-type-options: nosniff
content-security-policy: default-src 'self' faproulette.co faproulette.co:2053 faproulette.co:2083 faproulette.co:2087 new.faproulette.co files.faproulette.co *.faproulette.co:2053 *.faproulette.co:2083 *.faproulette.co:2087 wss://www.faproulette.co:2087 wss://faproulette.co:2087 wss://new.faproulette.co:2087 blob:; font-src 'self' files.faproulette.co cdnjs.cloudflare.com; img-src 'self' files.faproulette.co data: blob: cdn.jsdelivr.net https://www.exoclick.com https://www.juicyads.com; script-src 'self' files.faproulette.co cdnjs.cloudflare.com challenges.cloudflare.com ajax.cloudflare.com static.cloudflareinsights.com a.magsrv.com; style-src 'self' files.faproulette.co 'unsafe-inline' cdnjs.cloudflare.com; frame-src challenges.cloudflare.com adserver.juicyads.com a.magsrv.com *.sandbox-netvalve.com *.netvalve.com 3dsecuresuite.com; object-src 'none'; form-action 'self'; connect-src 'self' wss: https: blob:
strict-transport-security: max-age=31536000; includeSubdomains; preload