letsroam.com

HTML metadata

Title

City Scavenger Hunts | Wander With Purpose | Let's Roam

Description

Let's Roam has Scavenger hunts and activities help you explore the world and connect with others.

Language

en

Canonical

https://www.letsroam.com

Translations

ar
cs
da
de
el
en
es
fi
fr
he
hi
hu
it
ja
ko
nl
no
pl
pt
ro
ru
sv
th
tr
zh

Open Graph

title: City Scavenger Hunts | Wander With Purpose | Let's Roam
description: Let's Roam has Scavenger hunts and activities help you explore the world and connect with others.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Third-party hosts loaded (2)

cdnjs.cloudflare.com×26
www.googletagmanager.com×1

Social

Registration

Registrar

NameCheap, Inc.

Created

2016-11-04

Expires

2033-11-04 2725 days left

Updated

2024-10-11

Name servers

chip.ns.cloudflare.com
cloe.ns.cloudflare.com

DNS records live

NS

chip.ns.cloudflare.com
cloe.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 6 TXT records

google-site-verification=4v0qNv7MhWavJzbSwbyFgwWqp1ybfd-T7pCjIKBwDVg
google-site-verification=E2yJHqEaApM4q5iRnd42_rmjUW5fwF2HQ7N-WGAdwWY
hubspot-developer-verification=NmIwZGZkOWEtZTY3Yi00MjU5LWI2MWYtYzM1YjU5NjEyNDc0
owner=Let's Roam, LLC
ZOOM_verify_5CwBZzHZepoi3cAiR1p1bJ
facebook-domain-verification=ldg8o8fz0madea2nz56im6o2gec9s4

Email authentication partial

SPF

v=spf1 include:99137224.ppspf.net include:4896574.spf02.hubspotemail.net include:_spf.google.com include:mailgun.org ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email;

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0PBR6ble+CtFzHgr8vLZWCPO4514Rxdj5yelEljbKwWXDXCzcKhPNSBLhB7+t7XvpbG0uyQnbNYUH…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgbvtTwwSa/pQkRiAPdMoslAhgZnlNUShyRJNiPRlvEeONtdq/ou7srChojc+5GASWhtJ2Z+JzYgJFmBQ59u+uG9YMkyp…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXKArIriZO9dHFRHXiKn2xQRqMLxYxuscnub081WtByQL5r9K+N+li0crPuLLCKqqNByf4/AND3RSuUPXZ…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCz0j2z0ARZWnaBSAbbj24zOaa5gJF7s0uy/j4wpYWSAs12mdUjRXAzEfwMyhtvgQZWLqdVpUtbQpw5Zy0x4H19V8…

selectors probed

Certificate (current)

WE1

from 2026-04-08 to 2026-07-07

Expires in 49 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.letsroam.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: default-src * 'self'; script-src * 'self' 'unsafe-inline' 'unsafe-eval' data:; style-src * 'self' 'unsafe-inline'; img-src * 'self' data:; connect-src * 'self'; frame-src * 'self'; font-src * 'self'; media-src * 'self'; object-src * 'self'; worker-src 'self' blob:;, default-src * 'self'; script-src * 'self' 'unsafe-inline' 'unsafe-eval' data:; style-src * 'self' 'unsafe-inline'; img-src * 'self' data:; connect-src * 'self'; frame-src * 'self'; font-src * 'self'; media-src * 'self'; object-src * 'self'; worker-src 'self' blob:;
strict-transport-security: max-age=0; includeSubDomains; preload