grandcasinomn.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1690 ms crawled 2026-05-18

US · 76.76.21.21 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Language: en

Technology

CDN: Vercel
CMS: Next.js

Third-party hosts loaded (1)

grandcasino-app-prod-hmhq269ox-mlcv.vercel.app×16

Registration

Registrar

GoDaddy.com, LLC

Created

2001-10-25

Expires

2032-10-25 2349 days left

Updated

2023-09-26

Name servers

ns41.domaincontrol.com
ns42.domaincontrol.com

DNS records live

NS

ns41.domaincontrol.com
ns42.domaincontrol.com

MX

0 grandcasinomn-com.mail.protection.outlook.com

Verified for

Google

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:psam@grcasinos.com

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb2IeQz0/bYf7Dl86XN2VYTzsb5dC2L0RlZTxqaP+DbCOYF695/k66uwHntui4Wf4ewTibWMFXJ5Cx7qz7…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHucUA3b/33wc1ZOeuc+mlHZdWH9EC6iJGRKA3g2lNQ0IYv/KpzF6qdLjybAGERmxEAXxicNhC7m5tuKKgd6Pw2m…

selectors probed

Certificate (current)

R13

from 2026-04-29 to 2026-07-28

Expires in 69 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.grandcasinomn.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self' *; style-src 'self' 'unsafe-inline' https://*.vercel.app https://fonts.googleapis.com https://tags.srv.stackadapt.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vercel.live https://www.google-analytics.com https://cdn.mouseflow.com https://js.adstk.io https://i.loopme.me https://js.adsrvr.org https://*.googletagmanager.com https://tags.tiqcdn.com https://static.ads-twitter.com https://*.btstatic.com https://tags.srv.stackadapt.com https://*.yimg.com https://*.googleadservices.com https://*.facebook.net https://acdn.adnxs.com https://*.vercel.app https://api-engage-us.sitecorecloud.io https://cdn.cookielaw.org https://acsbapp.com https://*.acsbapp.com https://player.vimeo.com https://www.youtube.com; https://pixel.byspotify.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://*.vercel.app https://pixel.byspotify.com; img-src * data:; object-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains; preload