hearthpwn.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1348 ms crawled 2026-05-18

US · 104.26.9.242 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title

HearthPwn - Hearthstone Database, Deck Builder, News, and more!

Description

Hearthstone Database, Deck Builder, News, and more!

Language

en-us

Feeds

Hearthstone News from HearthPwn RSS
Sounds RSS

Open Graph

url: https://www.hearthpwn.com/
title: HearthPwn
locale: en_US
site name: HearthPwn
description: Hearthstone Database, Deck Builder, News, and more!

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Third-party hosts loaded (3)

apis.google.com×1
cdnjs.cloudflare.com×1
www.googletagmanager.com×1

Social

Contact

Email

support@hearthpwn.com

Registration

Registrar

Cloudflare, Inc.

Created

2013-05-07

Expires

2027-05-07 352 days left

Updated

2026-04-07

Name servers

kami.ns.cloudflare.com
ned.ns.cloudflare.com

DNS records live

NS

kami.ns.cloudflare.com
ned.ns.cloudflare.com

MX

1 smtp.google.com

TXT

Show 4 TXT records

google-site-verification=M5bCtgLpObd8DbPAh6bYJZ3GkaWnVUUccQLU0e2NTu0
google-site-verification=mqR6AiCAim0y86HEcLmQ4fzbCzHJdyFMJOz08LYGeDU
brave-ledger-verification=e98fc0813dff48c4602372ba197197577f07cd0b74da9f37f882b9c29f38911a
google-site-verification=7_NO_-_1VBchHtxTwx2Hw0zap8IIpKD36EbQ11gagr4

Email authentication strong

SPF

v=spf1 include:mailgun.org include:mail.zendesk.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:twitch@rua.agari.com; ruf=mailto:twitch@ruf.agari.com

policy: reject (enforced)

DKIM

google: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCzTSyYwMnEvbcz0oVq8ls5hDJGrJCMCCGmGcP+ANnkHbt54ApIafg3g7+FH7OryihH2B4wtbhwjKf20…

selectors probed

Certificate (current)

WE1

from 2026-04-01 to 2026-06-30

Expires in 42 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.hearthpwn.com/

present

x-frame-options

findings

missing HSTS
missing Content Security Policy
weak frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: DENY, SAMEORIGIN