globalsignalexchange.org
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Next.js
Third-party hosts loaded (2)
- cdn.sanity.io×54
- img.youtube.com×3
Social
Contact
- Phone
Registration
- Registrar
- Netistrar Limited
- Created
- 2024-09-30
- Expires
- 2026-09-30 132 days left
- Updated
- 2025-09-05
- Name servers
-
- doug.ns.cloudflare.com
- mallory.ns.cloudflare.com
DNS records live
- NS
-
- doug.ns.cloudflare.com
- mallory.ns.cloudflare.com
- MX
-
- 16 route1.mx.cloudflare.net
- 17 route3.mx.cloudflare.net
- 46 route2.mx.cloudflare.net
Email authentication weak
- SPF
-
v=spf1 include:_spf.mx.cloudflare.net ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
WE1
Expires in 32 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src 'self'; connect-src 'self' webservices.gse.live webservices.dap.live webservices.dnsrf.org www.youtube.com region1.google-analytics.com www.google.com cdn.sanity.io us-central1-dap-project-314710.cloudfunctions.net vercel.live *.vercel.live; script-src 'self' www.google.com www.gstatic.com webservices.gse.live www.googletagmanager.com vercel.live *.vercel.live 'nonce-NzY2ZThjYTgtNjMwYy00YTZjLTk0MzYtMjY2YTAxZGE2ZWNm'; style-src 'self' fonts.googleapis.com 'unsafe-inline'; font-src 'self' fonts.googleapis.com fonts.gstatic.com; img-src 'self' img.youtube.com cdn.sanity.io cdnjs.cloudflare.com www.googletagmanager.com blob: data:; media-src 'self' cdn.sanity.io; object-src 'none'; frame-ancestors 'self' localhost:3333 gse1.sanity.studio gse.live beta.gse.live:5805; frame-src 'self' www.google.com www.youtube.com; upgrade-insecure-requests;- strict-transport-security
max-age=63072000, max-age=63072000; includeSubdomains; preload
Links to (41)
- abuse.ch×1
- abusix.com×1
- amazon.co.uk×1
- apwg.org×1
- belgium.be×1
- bfore.ai×1
- bt.com×1
- cert.pl×1
- crimestoppersinternational.org×1
- cyberdefencealliance.org×1
- cyberthreatalliance.org×1
- ebrand.com×1
- facebook.com×1
- fraudkillers.org×1
- fraudra.dk×1
- gasa.org×1
- globaleyez.net×1
- gogolook.com×1
- google.com×1
- group-ib.com×1
- iacc.org×1
- infoblox.com×1
- justguard.be×1
- linkedin.com×1
- meta.com×1
- microsoft.com×1
- motionpictures.org×1
- mtch.com×1
- netcraft.com×1
- oxil.uk×1
- punktum.dk×1
- scam.org×1
- scamalytics.com×1
- seraphsecure.com×1
- spamhaus.org×1
- tunicpay.com×1
- unodc.org×1
- whoisxmlapi.com×1
- youtube.com×1
- zerofox.com×1
- zetalytics.com×1