michaelkupietz.com

HTML metadata

Title

Kupietz ARTS+CODE | Creative Art & Technology Showcase

Description

Michael Kupietz's creative productions, arrangements and operations. Art, technology and amusements, plus a few surprises for the intrepid

Language

en-US

Feeds

MICHAEL KUPIETZ ARTS+CODE » Feed RSS

Open Graph

url: https://michaelkupietz.com/
title: Kupietz ARTS+CODE | Creative Art & Technology Showcase
locale: en_US
site name: MICHAEL KUPIETZ ARTS+CODE
description: Michael Kupietz's Creative Productions, Arrangements, and Operations • Art, Technology, and Amusements

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Cloudflare Insights

Third-party hosts loaded (15)

www.facebook.com×2
analytics.ahrefs.com×1
aperture.p3k.io×1
apopheniapays.com×1
bsdetector.info×1
github.com×1
gmpg.org×1
indieauth.com×1
michaelkupietz.bandcamp.com×1
mike20.livejournal.com×1
mikeycosm.org×1
static.cloudflareinsights.com×1
tokens.indieauth.com×1
web.brid.gy×1
www.mikeycosm.org×1

Contact

Email

Registration

Registrar

NameCheap, Inc.

Created

2019-04-24

Expires

2027-04-24 339 days left

Updated

2026-03-25

Name servers

frida.ns.cloudflare.com
porter.ns.cloudflare.com

DNS records live

NS

frida.ns.cloudflare.com
porter.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=hUgCRT5rhDMztvKd41Y0bQ8gy3QbtQ3YDqfpRN1NRHc
google-site-verification=bzcAHZDHEVObJWmrQuFIGiNGO3jt5ERU2rgZ5AVvV_A

Email authentication strong

SPF

v=spf1 +a +mx +ip4:50.87.253.80 +ip4:76.102.102.223 +ip4:98.51.220.37 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:cfbf08826a1643068ec659fc944834dc@dmarc-reports.cloudflare.net,mailto:dmarc-sp@kupietz.com; pct=100; adkim=r; aspf=r

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93e70ryOWtcoI9levvO5pLgz6l0odCgMA13bCMET/vXvLIROB9q+JaekruCBQvy9Z4GwJIvVXlxDP3…

selectors probed

Certificate (current)

WE1

from 2026-04-12 to 2026-07-11

Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://michaelkupietz.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://octothorp.es https://static.hetrix.io https://analytics.ahrefs.com https://*.cloudflareinsights.com https://static.cloudflareinsights.com https://michaelkupietz.com https://cdn.jsdelivr.net https://m.youtube.com https://s3.tradingview.com https://www.youtube.com https://apis.google.com https://accounts.google.com data: https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://ajax.googleapis.com; object-src 'none'; frame-ancestors 'self' https://webofdevs.com https://iframetester.com https://static.hetrix.io
strict-transport-security: max-age=63072000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none; report-to='default'
cross-origin-resource-policy: cross-origin

Links to (3)

Linked from (1)

blogroll.org×2