kumparan.com

HTML metadata

Title: kumparan.com - Bicara Fakta Lewat Berita
Description: kumparan.com adalah platform media berita kolaboratif yang menyajikan informasi aktual tentang news, sepak bola, ekonomi, politik, dan showbiz.
Language: id-ID
Canonical: https://kumparan.com/

Open Graph

url: https://kumparan.com
card: summary
site: kumparan
title: kumparan.com - Bicara Fakta Lewat Berita
locale: id_ID
creator: kumparan
site name: kumparan
description: kumparan.com adalah platform media berita kolaboratif yang menyajikan informasi aktual tentang news, sepak bola, ekonomi, politik, dan showbiz.

Technology

Server: openresty

Analytics

Google Analytics
Google Tag Manager

Ads

Google Ads
Google Ads (DoubleClick)
Meta Pixel

Social widgets

Twitter Widget

Third-party hosts loaded (13)

apis.google.com×1
cdn.onesignal.com×1
com.kumparan×1
connect.facebook.net×1
d31qbv1cthcecs.cloudfront.net×1
maps.googleapis.com×1
platform.twitter.com×1
securepubads.g.doubleclick.net×1
tags.crwdcntrl.net×1
unpkg.com×1
www.google-analytics.com×1
www.googleadservices.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2016-02-02

Expires

2032-02-02 2084 days left

Updated

2025-01-16

Name servers

katelyn.ns.cloudflare.com
patrick.ns.cloudflare.com

DNS records live

NS

katelyn.ns.cloudflare.com
patrick.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 10 TXT records

zoho-verification=zb63715097.zmverify.zoho.com
asv=34adec738da7f8b9f25761d9369c321b
atlassian-domain-verification=L3LO1gP/ig/rNlyEtQtsEeTxyrzCpWe2IIu6InVpHuG074QZED76s3JZsFUFrTrh
facebook-domain-verification=i4m34ixrmyn7ovjavhgybz8wjcehhe
google-site-verification=Tnw4pCa4DEgrw2My-ptnPzmUopvFWUeHEo0kuuCpNKk
google-site-verification=kkADJOlYoAbFi__8kTnZpmsX8UnUSHncucKE7gjDIbw
google-site-verification=l33GpxUXDVcrpXwocHMW1UgNSi9vYdTyzoWMtE1p_7k
google-site-verification=pMWmiiUic6Y1AvWv2I4RrVcsvQTeVzmvQp0pHniN7C4
google-site-verification=xbvbe6fUrUV79zJkW9t19epJi_4c3rXn6l5oIKVkONQ
google-site-verification=zxT3PDrBYyWpSrI-QcuRiZ84DLMX4-0ZgtrzqzSDKh4

Email authentication strong

SPF

v=spf1 include:_spf.google.com ip4:52.220.235.221 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:it.support@kumparan.com,mailto:sre@kumparan.com

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCjupr8Bpm99+GKHFBQVUGOsreYE2qZrOtebUBlex5T006Cu6MmZPGX3zE7C351N2Bnc6G8q+KSJU1FQIVdLr…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-10-23 to 2026-11-22

Expires in 186 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://kumparan.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(), camera=(), clipboard-read=(self), clipboard-write=(self), payment=(self), storage-access=(self), web-share=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: mailto: tel: *.kumparan.com https://accounts.google.com/gsi/ kumparan.com *.kumparan.com kumpar.com *.kumpar.com cloudflare.com *.cloudflare.com unpkg.com *.unpkg.com youtube.com *.youtube.com kitabisa.com *.kitabisa.com tiktok.com *.tiktok.com facebook.com *.facebook.com facebook.net *.facebook.net instagram.com *.instagram.com twitter.com *.twitter.com google.com *.google.com google.co.id *.google.co.id googleapis.com *.googleapis.com gstatic.com *.gstatic.com onesignal.com *.onesignal.com iframe.ly *.iframe.ly googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com googleadservices.com *.googleadservices.com googlesyndication.com *.googlesyndication.com googleads.g.doubleclick.net *.googleads.g.doubleclick.net doubleclick.net *.doubleclick.net criteo.com *.criteo.com midtrans.com *.midtrans.com open.spotify.com *.open.spotify.com *.telkomsel.com google.co.th *.google.co.th playbuzz.com *.pla
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups