hamstudy.org

HTML metadata

Title: HamStudy.org: Cutting edge amateur radio study tools
Description: Free ham radio flash cards, practice tests, and question pools as well as introduction to ham radio and explanations for questions.
Language: en

Open Graph

description: Free ham radio flash cards, practice tests, and question pools as well as introduction to ham radio and explanations for questions.

Technology

Third-party hosts loaded (2)

analytics.signalstuff.com×1
www.paypal.com×1

Social

Registration

Registrar

NameCheap, Inc.

Created

2010-05-20

Expires

2027-05-20 364 days left

Updated

2023-01-23

Name servers

ns1.he.net
ns2.he.net
ns3.he.net
ns4.he.net
ns5.he.net

DNS records live

NS

ns1.he.net
ns2.he.net
ns3.he.net
ns4.he.net
ns5.he.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:ve.tools -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; sp=reject; fo=1; rua=mailto:re+gkb5cjovo25@dmarc.postmarkapp.com; pct=100; aspf=r

policy: quarantine · sp=reject

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKizsF4jnhWA5pnFL9pqNzcoV8Xjk23BVBj3osqRKyvn+ud0bJlet2k/83cjzqaFbFKN3Fd1Yauj/eflq55r…

selectors probed

Certificate (current)

R12

from 2026-03-29 to 2026-06-27

Expires in 37 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://hamstudy.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(self), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(self), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(self), payment=(), picture-in-picture=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' sentryio.signalstuff.com *.gradecam.com *.hamstudy.org *.signalstuff.com *.exam.tools; script-src 'self' 'unsafe-inline' 'unsafe-eval' sentryio.signalstuff.com *.gradecam.com *.hamstudy.org *.signalstuff.com *.exam.tools https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.googleapis.com; worker-src 'self' sentryio.signalstuff.com *.gradecam.com *.hamstudy.org *.signalstuff.com *.exam.tools blob:; connect-src 'self' sentryio.signalstuff.com *.gradecam.com *.hamstudy.org *.signalstuff.com *.exam.tools https://*.googleapis.com wss://hamstudy.org; frame-src 'self' sentryio.signalstuff.com *.gradecam.com *.hamstudy.org *.signalstuff.com *.exam.tools https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; style-src 'self' 'unsafe-inline' sentryio.signalstuff.com *.gradecam.com *.hamstudy.org *.signalstuff.com *.exam.tools https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com; font-src 'self' data: sentryio.signalst
strict-transport-security: max-age=31536000; includeSubDomains; preload