joshbarro.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-07 · ok HTTP/1.1 200 5591 ms crawled 2026-05-07

US · 198.185.159.144 · AS53831 Squarespace, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Very Serious | Josh Barro | Substack

Description

Josh Barro's newsletter about politics, the economy and culture. Click to read Very Serious, a Substack publication with tens of thousands of subscribers.

Language

Canonical

https://www.joshbarro.com/

Feeds

Very Serious RSS

Open Graph

url: https://www.joshbarro.com/
title: Very Serious | Josh Barro | Substack
description: Josh Barro's newsletter about politics, the economy and culture. Click to read Very Serious, a Substack publication with tens of thousands of subscribers.

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Cloudflare Insights

Fonts

Google Fonts

Third-party hosts loaded (4)

substackcdn.com×252
fonts.gstatic.com×1
js.sentry-cdn.com×1
static.cloudflareinsights.com×1

Registration

Registrar

Squarespace Domains II LLC

Created

2007-10-14

Expires

2026-10-14 147 days left

Updated

2024-05-31

Name servers

ns-cloud-c1.googledomains.com
ns-cloud-c2.googledomains.com
ns-cloud-c3.googledomains.com
ns-cloud-c4.googledomains.com

DNS records live

NS

ns-cloud-c1.googledomains.com
ns-cloud-c2.googledomains.com
ns-cloud-c3.googledomains.com
ns-cloud-c4.googledomains.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

not published

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy/hnnzyb9DL+/LWXV/s7FJ9M0QMMvXij5sSVKYnU0XQaCrBFUCxLSZMKLLf+L0byl1OhkNPbRhNPy…

selectors probed

Certificate (current)

R12

from 2026-03-16 to 2026-06-14

Expires in 25 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.joshbarro.com/

present

strict-transport-security
content-security-policy

findings

CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: frame-ancestors 'self' https://*.substack.com https://substack.com
strict-transport-security: max-age=31536000; includeSubDomains; preload