indexo.dev

meet-fred.com

.com crawl

First seen 2026-05-19 · Last seen 2026-05-30 · ok HTTP/1.1 200 677 ms crawled 2026-05-27

US · 104.26.1.37 · AS13335 Cloudflare, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
Fred | User Research and Decision Intelligence
Description
Fred helps teams plan UX research, collect evidence, synthesize insights with AI, and build traceable reports in one connected workspace.
Language
en
Canonical
https://meet-fred.com

Open Graph

url
https://meet-fred.com
title
Fred - The User Research Shepherd
locale
en_US
site name
Fred - The User Research Shepherd
description
The UX research platform that accelerates product-market fit with tests, panels, and AI insights.

Technology

CDN
Cloudflare
CMS
Next.js
Analytics
  • Cloudflare Insights
  • Google Tag Manager

Third-party hosts loaded (2)

  • static.cloudflareinsights.com×1
  • www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar
Squarespace Domains LLC
Created
2024-11-23
Expires
2026-11-23 173 days left
Updated
2025-11-19
Name servers
  • harmony.ns.cloudflare.com
  • mustafa.ns.cloudflare.com

DNS records live

NS
  • harmony.ns.cloudflare.com
  • mustafa.ns.cloudflare.com
MX
  • 1 smtp.google.com
Verified for
  • Google
  • Meta
  • Stripe

Email authentication partial

SPF
v=spf1 include:146948896.spf08.hubspotemail.net ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:report@meet-fred.com
policy: none (monitoring only)
DKIM
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed

Certificate (current)

WE1
from 2026-05-15 to 2026-08-13
Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://meet-fred.com/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://*.posthog.com https://*.cloudflareinsights.com https://cookie-script.com https://*.cookie-script.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hsadspixel.net https://*.hs-analytics.net https://*.hs-banner.com https://*.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: api.producthunt.com cdn.magicui.design https://*.google-analytics.com https://*.g.doubleclick.net https://*.posthog.com https://*.google.com https://*.google.it https://*.hubspot.com https://*.facebook.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://www.googletagmanager.com; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.g.doubleclick.net https://*.posthog.com https://*.google.com ht

Links to (3)

Linked from (1)