labri.org

.org crawl

First seen 2026-04-14 · Last seen 2026-05-14 · ok HTTP/1.1 200 2198 ms crawled 2026-05-08

US · 50.87.249.35 · AS46606 Unified Layer

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title

L'Abri – Shelter for honest questions

Language

en-US

Generator

Elementor 4.0.7; features: additional_custom_breakpoints; settings: css_print_method-external, google_font-enabled, font_display-auto

Canonical

https://labri.org/

Feeds

L'Abri » Feed RSS
L'Abri » Comments Feed RSS

Technology

Server: nginx
CMS: WordPress

Fonts

Google Fonts

Third-party hosts loaded (7)

i0.wp.com×23
c0.wp.com×7
fonts.googleapis.com×3
js.stripe.com×2
stats.wp.com×2
fonts.gstatic.com×1
gmpg.org×1

Registration

Registrar

Bluehost Inc.

Created

1997-09-01

Expires

2026-08-31 103 days left

Updated

2025-08-20

Name servers

ns1.bluehost.com
ns2.bluehost.com

DNS records live

NS

ns1.bluehost.com
ns2.bluehost.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

MS=0AA812F0CC47287AEF56F0956E856F93587250AF

Email authentication partial

SPF

v=spf1 ip4:50.87.249.35 ip4:67.222.36.157 a mx include:websitewelcome.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzonnuclifiWrKgjBytB9FRnvTXhIHqW5f7+CDPmIdSMV/elnBjGPNubbPkH5HWh2mopii8r9/yBRot…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-04-21 to 2026-07-20

Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://labri.org/

present

permissions-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")