fwupd.org

.org toplist

First seen 2026-04-11 · Last seen 2026-04-11 · ok HTTP/1.1 200 967 ms crawled 2026-05-18

US · 44.224.68.253 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: LVFS: Home
Language: en

Technology

Server: gunicorn
CMS: Gatsby

Registration

Registrar

1API GmbH

Created

2015-07-20

Expires

2026-07-20 62 days left

Updated

2025-11-24

Name servers

mariah.ns.cloudflare.com
nitin.ns.cloudflare.com

DNS records live

NS

mariah.ns.cloudflare.com
nitin.ns.cloudflare.com

MX

10 mx1.forwardemail.net
10 mx2.forwardemail.net

TXT

Show 4 TXT records

forward-email-site-verification=lJva7Yy3A3
libera-3KQDNcjGzwei3Vik83aumoxM
ALIAS for prod-lvfs-155352784.us-west-2.elb.amazonaws.com
_globalsign-domain-verification=B57sRQpmte4G4w-gavZbVNmmNsMxGp5kcL19UP2599

Email authentication weak

SPF: v=spf1 include:spf.forwardemail.net ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M01

from 2026-04-20 to 2026-11-04

Expires in 169 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://fwupd.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://cdn.fwupd.org/;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.fwupd.org/;img-src 'self' https://cdn.fwupd.org/ data:;style-src 'self' 'unsafe-inline' https://cdn.fwupd.org/;font-src 'self' https://cdn.fwupd.org/;frame-ancestors 'none';object-src 'none';connect-src 'self' https://cdn.fwupd.org/
strict-transport-security: max-age=63072000;includeSubDomains;preload