indexo.dev

konibet.com

.com crawl

First seen 2026-05-03 · Last seen 2026-05-10 · ok HTTP/1.1 200 2213 ms crawled 2026-05-10

DE · 138.113.27.14 · AS54994 Meteverse Limited.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Language
ja

Technology

CMS
Gatsby
Fonts
  • Google Fonts

Third-party hosts loaded (3)

  • ik.imagekit.io×67
  • fonts.gstatic.com×2
  • accounts.google.com×1

Registration

Registrar
NameCheap, Inc.
Created
2019-05-21
Expires
2026-05-21 2 days left
Updated
2025-04-21
Name servers
  • ns-cloud-d1.googledomains.com
  • ns-cloud-d2.googledomains.com
  • ns-cloud-d3.googledomains.com
  • ns-cloud-d4.googledomains.com

DNS records live

NS
  • ns-cloud-d1.googledomains.com
  • ns-cloud-d2.googledomains.com
  • ns-cloud-d3.googledomains.com
  • ns-cloud-d4.googledomains.com
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
  • 5000 mxa.mailgun.org
  • 5000 mxb.mailgun.org
TXT
Show 7 TXT records
  • google-site-verification=BI96v4YCIJ6M5tL7OiJKVETkiDFFHI2gLx2lAJaBkH4
  • gcb_domain=ZXlKcGRpSTZJa293V1hWUFdtdGFLMEp1UlhWMVdWbHdVRFZ2ZUdjOVBTSXNJblpoYkhWbElqb2lORGN5ZDBZd05uQkdlSGxHVkdwTFVHSkdhWG95ZHowOUlpd2liV0ZqSWpvaVpqZzJZekl6TVRBeU1tUmxOamMzWkRFek1ESTROemczTXpJME1qRmhOelF3WTJaak0ySTRZVGM0TkRCbE1qQm1OelkzTmpJMk56YzJORGMxWXpreVlpSXNJblJoWnlJNklpSjk=
  • globalsign-domain-verification=A521F0CDE2587936A3A313E7DC2B7F33
  • detectify-verification=8ff1f55ac0505bbdf8d648513bec5601
  • google-site-verification=MfdDOXxWN2C25KBcj7C-7BSloA5uUf3kvXIDYk37QFo
  • w3-verification=014b9e63f371069548b33e571e7cd64b
  • google-site-verification=PwB8Q-VrN7OpCZM7118vc_RSM6LnfQ_YSCBKYzOz44g

Email authentication partial

SPF
v=spf1 include:zoho.com include:mailgun.org include:spf.ippx.com ~all
softfail (~all)
DMARC
v=DMARC1;p=none;
policy: none (monitoring only)
DKIM
  • mail: v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCAGGblpqFs1bvnix4d8ajBkJH+Be9cIKs3TxvapTbgqYHpwVdenR5lQ7fGCUBW4tS487vDSw7Ly7hB3V+83qLY…
  • dkim: v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZiDEIFrgysxH2WP8Twqoba/0C7Kzu5n+Rq4hZmc2An1IJXM7MDcFIHUIvpACoMM5+O+suucbWDSh0chA8A9Cw…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GhtZvFDSowEWUkAMnisQcsTBiq0SDGInnYk6crqOSQ71YCDJzJGA/+Hx8GQR3xyEzVELjlq2ZUwim8OjD…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClhPBf0DXe7Qq1NZ/1he+KYJ2C63JBNwK0CVattZAt8yiF7AqtIFJNHG7vZGmpN9jt7PJA/nHoom8+sbKWUGH/OP…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2026-02-12 to 2027-03-16
Expires in 301 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://konibet.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
permissions-policy
camera=(self "https://secure-me.au10tixservices.com"), microphone=(self "https://secure-me.au10tixservices.com")
x-content-type-options
nosniff
content-security-policy
default-src 'self' 'unsafe-eval' http: https: data: blob: 'unsafe-inline'; frame-src 'self' * http: https: data: blob: 'unsafe-inline'; frame-ancestors 'self'; connect-src 'self' https://sentry.io https://*.sentry.io https://*.ingest.sentry.io https://www.google-analytics.com https://stats.g.doubleclick.net https://*.facebook.com https://connect.facebook.net https://app.adjust.world https://app.adjust.com https://analytics.google.com https://*.google.com https://*.googleusercontent.com https://*.69master.cc https://*.blancotag.com wss://*.blancotag.com https://*.meteorshower.sbs wss://*.meteorshower.sbs https://*.rwbinter.com https://*.evolutiongaming.com https://cdn-sp.kertn.net https://*.pg-demo.com https://*.pgf-nmu2nd.com https://api.x1skf.com https://api.zmcyu9ypy.com https://api.u2uyu876x.com https://api.t2rytwsha.com https://static.t2rytwsha.com https://m.t2rytwsha.com https://*.u17tz.com https://*.pgf-asqb7a.com https://*.pgf-asw0zz.com https://*.pg-nmga.com https://*.y41w4.com
strict-transport-security
max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy
unsafe-none
cross-origin-resource-policy
same-origin

Links to (1)

Linked from (2)