latoken.com

HTML metadata

Title: Earn & Trade The Next Bitcoins Before Others
Description: All tokens, free airdrops, and crypto cards are easy and secure to use in one exchange. Sign up to get new tokens for free.
Language: en

Open Graph

url: latoken.com
title: Earn & Trade The Next Bitcoins Before Others
description: All tokens, free airdrops, and crypto cards are easy and secure to use in one exchange. Sign up to get new tokens for free.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Cloudflare Insights

Fonts

Google Fonts

Third-party hosts loaded (5)

s2.coinmarketcap.com×6
fonts.googleapis.com×2
fonts.gstatic.com×2
static.cloudflareinsights.com×1
www.facebook.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2017-07-07

Expires

2030-07-07 1510 days left

Updated

2023-07-02

Name servers

aida.ns.cloudflare.com
kanye.ns.cloudflare.com

DNS records live

NS

aida.ns.cloudflare.com
kanye.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
10 mxa.mailgun.org
10 mxb.mailgun.org
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 21 TXT records

MS=2571D8D64BB459621DDB5349B4617CD15559B15E
google-site-verification=XwzmCm92SEj93taFs73IMCNU4Aw4nO963VCLVVYP0Do
google-site-verification=ILDhTrKjiY5AUFDTNdNxTo9F0d914zUyKs1CdusfLDc
google-site-verification=ZPKnTV7jUPgAYesNQA9PkWcNSsAnvvsT3TIXT-ldQJQ
google-site-verification=z4aF0h4k_jmL8Fpc6Kl2ccNVVQI8CN6A9TGf9AIltWA
google-site-verification=-4nrmdFL7cTpdjO5aUjQsH-F611miZ24nsIN_f1x6-g
google-site-verification=94E-qOuweWhlgL9fPLmOcoJvNIBc79o9ZxCX36uy5To
ca3-150ae70ae2834b3ea8dcafd4a6958336
P5V-H2E-C3W
yandex-verification: 7406778c2295af4f
google-site-verification=KKVWNmLt4XmUC9RwamZCgrvkapxFhurUMFS5hmZ33IM
mailru-verification: ca90a671d107f9cb
mailru-verification: 371d4eda8be360a0
25.10.2021
facebook-domain-verification=si7p5o062v1p74q63pslfiber9gvys
mailru-domain: U8Y84qvkbZY6m6tq
google-site-verification=uRRopKt4YDTtDkLgiyaZHYJkP8xgaVnKFP9sUxkuFlM
google-site-verification=mzOpHsU3qVLnR-KdgXoMyXRhaliejcH0iog-ElTbd2g
atlassian-domain-verification=fE57N9RwkqfbDXf10/3oDmLXRq9eqjUU5v7O8tF7UGJTqyM39vj6E5BPH9Za+JkP
google-site-verification=45bYGcO4xbFeGwC6SnYxB2ntBxK_HvM4DafpVynncXY
google-site-verification=Phx1iFweZX-wZM-7AbNUvwNoCISqFuGShEDxCQKR_Eg

Email authentication strong

SPF

v=spf1 include:_spf.elasticemail.com include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1;p=quarantine

policy: quarantine

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

E7

from 2026-04-13 to 2026-07-12

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://latoken.com/

present

strict-transport-security
content-security-policy
x-frame-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self' *.latoken.com; font-src 'self' 'unsafe-inline' fonts.gstatic.com data: moments.latoken.com; style-src 'self' 'unsafe-inline' *.visualwebsiteoptimizer.com *.segment.io *.segment.com static.tildacdn.com fonts.googleapis.com *.tilda.ws *.tildacdn.com gso.amocrm.com *.twitter.com *.twimg.com moments.latoken.com promo.latoken.com *.sendbird.com; manifest-src 'self' 'unsafe-inline' cdn-new.latoken.com; script-src 'unsafe-inline' *.twitter.com *.twimg.com *.visualwebsiteoptimizer.com *.segment.com *.segment.io app.vwo.com gso.amocrm.ru gso.amocrm.com latoken.breezy.hr static.cloudflareinsights.com latoken.com vctv.latoken.com connect.facebook.net mc.yandex.ru *.smartlook.com *.google-analytics.com *.analytics.google.com analytics.google.com *.googletagmanager.com *.youtube.com *.tradingview.com *.zdassets.com *.zopim.com www.google.com www.gstatic.com cdn-new.latoken.com *.hcaptcha.com https://hcaptcha.com *.sendbird.com 'self' *.securionpay.com https://platform.onmeta.in/o
strict-transport-security: max-age=63072000; includeSubDomains; preload