insidermonkey.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 451 ms crawled 2026-05-19

US · 3.164.68.101 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Insider Trading & Hedge Fund Data, and Investment Newsletter From Insider Monkey
Description: Insider Monkey is a finance website that provides free insider trading and hedge fund data to ordinary investors.
Language: en-US
Canonical: https://www.insidermonkey.com/

Technology

CDN: Amazon CloudFront
Server: Apache

Analytics

Google Tag Manager

Ads

Google AdSense

Fonts

Adobe Fonts

Third-party hosts loaded (8)

d2w7kw43nye0pi.cloudfront.net×86
d13a9k2cw5p3go.cloudfront.net×2
pagead2.googlesyndication.com×1
u5.investingchannel.com×1
uat5-a.investingchannel.com×1
uat5-b.investingchannel.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

NameCheap, Inc.

Created

2010-08-02

Expires

2029-08-02 1170 days left

Updated

2024-08-01

Name servers

ns-103.awsdns-12.com
ns-1360.awsdns-42.org
ns-2022.awsdns-60.co.uk
ns-604.awsdns-11.net

DNS records live

NS

ns-103.awsdns-12.com
ns-1360.awsdns-42.org
ns-2022.awsdns-60.co.uk
ns-604.awsdns-11.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=y3IRbUyR-86j-xedqio3dXl5C8JpY_CFoHzERkkuHTk
oia39or3s8bgib94a1ev76g1un
google-site-verification=NWafIWM38LOWVlwQMzPTzVoSVlN2rrS6VbHqfk8PEaE

Email authentication strong

SPF: v=spf1 include:_spf.google.com include:amazonses.com ~all
softfail (~all)
DMARC: v=DMARC1;p=reject;pct=100;rua=mailto:etakgoz@insidermonkey.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M02

from 2025-08-19 to 2026-09-18

Expires in 121 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://insidermonkey.com/

present

strict-transport-security
content-security-policy
x-frame-options
referrer-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
missing content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
content-security-policy: upgrade-insecure-requests; block-all-mixed-content; default-src 'self' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob: data: 'report-sample'; worker-src 'self' blob:; connect-src 'self' https: wss:; img-src 'self' https: data: blob:; style-src 'self' https: 'unsafe-inline'; font-src 'self' https: data:; frame-src https:; child-src https: blob:; base-uri 'self'; form-action 'self'; object-src 'none'
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups