henrikkarlsson.xyz

.xyz crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 2643 ms crawled 2026-05-19

US · 52.33.207.7 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

sector media news type blog

HTML metadata

Title

Escaping Flatland | Henrik Karlsson | Substack

Description

I write essays about relationships, thinking, and agency, sometimes with my wife. We live on a windswept island in the Baltic Sea with our two daughters. Click to read Escaping Flatland, by Henrik Karlsson, a Substack publication with tens of thousands of subscribers.

Language

Canonical

https://www.henrikkarlsson.xyz/

Feeds

Escaping Flatland RSS

Open Graph

url: https://www.henrikkarlsson.xyz/
title: Escaping Flatland | Henrik Karlsson | Substack
description: I write essays about relationships, thinking, and agency, sometimes with my wife. We live on a windswept island in the Baltic Sea with our two daughters. Click to read Escaping Flatland, by Henrik Karlsson, a Substack publication with tens of thousands of subscribers.

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Cloudflare Insights

Fonts

Google Fonts

Third-party hosts loaded (4)

substackcdn.com×265
fonts.gstatic.com×1
js.sentry-cdn.com×1
static.cloudflareinsights.com×1

Registration

Registrar

Porkbun, LLC

Created

2023-05-12

Expires

2027-05-12 356 days left

Updated

2026-05-08

Name servers

curitiba.ns.porkbun.com
fortaleza.ns.porkbun.com
maceio.ns.porkbun.com
salvador.ns.porkbun.com

DNS records live

NS

curitiba.ns.porkbun.com
fortaleza.ns.porkbun.com
maceio.ns.porkbun.com
salvador.ns.porkbun.com

MX

10 fwd1.porkbun.com
20 fwd2.porkbun.com

Email authentication weak

SPF: v=spf1 include:_spf.porkbun.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-03-18 to 2026-06-16

Expires in 26 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.henrikkarlsson.xyz/

present

strict-transport-security
content-security-policy

findings

CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: frame-ancestors 'self' https://*.substack.com https://substack.com
strict-transport-security: max-age=31536000; includeSubDomains; preload