guestlist.co

HTML metadata

Technology

CDN

Cloudflare

Fonts

• Adobe Fonts

Third-party hosts loaded (4)

• d3uz7xkh0oumeo.cloudfront.net×7
• maps.googleapis.com×1
• maxcdn.bootstrapcdn.com×1
• use.typekit.net×1

DNS records live

NS

• kallie.ns.cloudflare.com
• matteo.ns.cloudflare.com

MX

• 23 route2.mx.cloudflare.net
• 49 route1.mx.cloudflare.net
• 79 route3.mx.cloudflare.net

Verified for

• Google

Email authentication strong

SPF

v=spf1 include:sendgrid.net include:_spf.mx.cloudflare.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:support+dmarc@guestlist.co; ruf=mailto:support+dmarc@guestlist.co; pct=100;

policy: reject (enforced)

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bPdVuEb1AevoTQXZKnua0LP3mUvTe573w+JtWDrpS80ijd41+PluemsaOc0tPqcXjs+zGfhkyh+C7JsUR…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGf48agD/8lkMYA1/XMcM8ke7c0N7zBe16xSLgb8KcS8yiANl55tIIbhXzMAMZJAnJfuw9m0wmvyOlchGR5Plhi+…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://guestlist.co/

present

• strict-transport-security
• x-content-type-options

findings

• missing Content Security Policy
• missing frame protection
• weak content type protection
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• glowworms.org.uk×1