indexo.dev

handmyth.com

.com crawl

First seen 2026-04-15 · Last seen 2026-05-12 · ok HTTP/1.1 200 1070 ms crawled 2026-05-08

FI · 65.108.104.232 · AS24940 Hetzner Online GmbH

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
HandMyth | Intangible Cultural Heritage & Artisan Crafts Gifts
Description
Explore HandMyth: ethical jewelry & handmade cultural gifts. Chinese traditional crafts, artisan pieces & sustainable gifts. Shop now.
Language
en-US
Generator
WordPress 6.9.4
Canonical
https://handmyth.com/
Translations
  • de ×2
  • en ×2
  • es ×2
  • fr ×2
  • it ×2
  • pt ×2
  • ru ×2
  • ja
Feeds

Open Graph

url
https://handmyth.com/
title
HandMyth | Intangible Cultural Heritage & Artisan Crafts Gifts
locale
en_US
site name
HandMyth
description
Explore HandMyth: ethical jewelry & handmade cultural gifts. Chinese traditional crafts, artisan pieces & sustainable gifts. Shop now.
updated time
2026-04-23T06:51:43+00:00

Technology

Server
LiteSpeed
CMS
WordPress
Fonts
  • Google Fonts

Third-party hosts loaded (3)

  • fonts.googleapis.com×3
  • fonts.gstatic.com×1
  • gmpg.org×1

Contact

Address
guangdu fushan lanhai dali yanbu 81 guangdu, 528100, fushan, 528200, CN

Registration

Registrar
Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
Created
2025-06-27
Expires
2026-06-27 37 days left
Updated
2025-10-22
Name servers
  • vip1.alidns.com
  • vip2.alidns.com

DNS records live

NS
  • vip1.alidns.com
  • vip2.alidns.com
CNAME
  • c7805597.tier1.quicns.com
Verified for
  • Google

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-04-02 to 2026-07-01
Expires in 42 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://handmyth.com/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.paypal.com https://www.paypalobjects.com https://c.paypal.com https://sdk.paypal.com https://sandbox.paypal.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: blob: https://www.paypalobjects.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://www.paypal.com https://api.paypal.com https://api-m.paypal.com https://c.paypal.com https://www.paypalobjects.com https://api.sandbox.paypal.com https://www.sandbox.paypal.com; frame-src 'self' https://www.paypal.com https://sandbox.paypal.com https://www.sandbox.paypal.com;

Links to (5)

Linked from (2)