harry-potter-house-quiz.org

HTML metadata

Title

Free Harry Potter House Quiz | Find Your Real Hogwarts House

Description

Take the fastest and most accurate Harry Potter house quiz to discover which Hogwarts house you belong to! Are you Gryffindor, Slytherin, Ravenclaw, or Hufflepuff?

Language

en

Canonical

https://harry-potter-house-quiz.org/

Translations

ar
de
en
es
fr
id
it
ja
nl
zh

Open Graph

title: Free Harry Potter House Quiz | Find Your Real Hogwarts House
locale: en_US
site name: Harry Potter House Quiz
description: Take the fastest and most accurate Harry Potter house quiz to discover which Hogwarts house you belong to! Are you Gryffindor, Slytherin, Ravenclaw, or Hufflepuff?

Technology

CDN: Vercel
CMS: Next.js

Ads

Google AdSense

Third-party hosts loaded (2)

fazier.com×2
pagead2.googlesyndication.com×1

Social

Contact

Email

hello@harrypotterquiz.com

Registration

Registrar

Cloudflare, Inc.

Created

2025-10-18

Expires

2026-10-18 149 days left

Updated

2025-10-23

Name servers

hunts.ns.cloudflare.com
sara.ns.cloudflare.com

DNS records live

NS

hunts.ns.cloudflare.com
sara.ns.cloudflare.com

MX

15 route2.mx.cloudflare.net
16 route3.mx.cloudflare.net
64 route1.mx.cloudflare.net

Verified for

Google
OpenAI

Email authentication weak

SPF: v=spf1 include:_spf.mx.cloudflare.net ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-25 to 2026-07-24

Expires in 64 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://harry-potter-house-quiz.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(self), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://umami.jeremyym0612.work https://accounts.google.com https://apis.google.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://*.clarity.ms https://challenges.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com; img-src 'self' data: blob: https: http:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://umami.jeremyym0612.work https://accounts.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://*.openrouter.ai wss://*.openrouter.ai https://api.stripe.com https://www.clarity.ms https://*.clarity.ms https://challenges.cloudflare.c
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin