listyourtool.com
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
- Ads
-
- Google AdSense
Third-party hosts loaded (3)
- frogdr.com×2
- pagead2.googlesyndication.com×1
- www.googletagmanager.com×1
Registration
- Registrar
- Cloudflare, Inc.
- Created
- 2025-04-05
- Expires
- 2027-04-05 321 days left
- Updated
- 2026-03-06
- Name servers
-
- blakely.ns.cloudflare.com
- karl.ns.cloudflare.com
DNS records live
- NS
-
- blakely.ns.cloudflare.com
- karl.ns.cloudflare.com
- TXT
-
google-site-verification=It-lwWgn6sTVnEjOQJq-OjZTulQwGxe0JdOlUXICuW0
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 50 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), microphone=(), geolocation=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googlesyndication.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.adtrafficquality.google https://us.i.posthog.com https://eu.i.posthog.com https://eu-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.googlesyndication.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https: http: *.google.com *.googlesyndication.com *.doubleclick.net *.googleadservices.com; connect-src 'self' https://us.i.posthog.com https://eu.i.posthog.com https://eu-assets.i.posthog.com *.google.com *.googlesyndication.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.adtrafficquality.google https://storage.googleapis.com; frame-src 'self' *.google.com *.googlesyndication.com *.doubleclick.net *.googleadservices.com *.adtrafficquality.google; media-src 'self' https: data:; object-src 'none'; base-uri 'self'; f- strict-transport-security
max-age=63072000
Links to (50)
- checkcompetitor.com×2
- frogdr.com×2
- alohago.ai×1
- assetcenter.app×1
- babymagic.app×1
- blazehive.io×1
- bloggingshout.com×1
- builtvibing.com×1
- calcfi.app×1
- ceered.com×1
- changew.com×1
- chatgptimages.app×1
- cleverbalance.ai×1
- clypto.com×1
- conjointly.com×1
- designsense.ai×1
- draftsheet.ai×1
- duedropin.com×1
- elispeak.com×1
- emberfyi.com×1
- expressify.ai×1
- facelessreels.app×1
- fissible.dev×1
- geolify.com×1
- getinnermost.com×1
- highground.ai×1
- hubfluence.io×1
- imageditor.net×1
- indexfox.ai×1
- kaizenloyalty.com×1
- kinetk.io×1
- kingmotioncontrol.com×1
- kraflio.com×1
- launchspot.ai×1
- leadverse.ai×1
- lovegen.ai×1
- masteringai.io×1
- memotune.com×1
- meshes.io×1
- microsaasapps.com×1
- mvplab.ai×1
- netlifyapp.org×1
- nocodewebsitebuilder.com×1
- notpink.app×1
- openclosedeyes.com×1
- paddlerspick.com×1
- pages.dev×1
- periodcalculator.me×1
- pledgely.app×1
- pluginmarketplace.ai×1