mistrezz.ai
HTML metadata
Technology
- CDN
- Cloudflare
- Ads
-
- TikTok Pixel
Third-party hosts loaded (4)
- eu-assets.i.posthog.com×2
- eu.i.posthog.com×2
- identitytoolkit.googleapis.com×2
- analytics.tiktok.com×1
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2025-08-29
- Expires
- 2027-08-29 465 days left
- Updated
- 2025-10-14
- Name servers
-
- noel.ns.cloudflare.com
- love.ns.cloudflare.com
DNS records live
- NS
-
- love.ns.cloudflare.com
- noel.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 include:spf.mailjet.com include:amazonses.com include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:89ad8ceac9f94bc5b15a482afbdf6a71@dmarc-reports.cloudflare.netpolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
WE1
Expires in 54 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self';script-src 'self' 'sha256-n1h6PFLTFTZ/1NTEtwGCBtVSa+SwvmBmd5w+4j2WXUc=' 'sha256-J0y+ApltYxs3oOnUB7iC5Fpr5T8dtCtnNKueQaiH+80=' 'sha256-AnWUbbQuZ5eKcWjlenBZah5gWCbdi+f9ZKvXIQ6frA0=' 'sha256-E06WQUNOLDqI4LilDS7Awah4cv3FzqNL44rtdeTqxpw=' 'sha256-KvpCbz0v4LNVIKDZgkLopXn/mzKNIBwJrAjGxQHDngk=' 'sha256-vYT787DIFCS5Z03+SQDvGmBl62pWpZH6X5xYRwl2b2M=' 'sha256-PSEQePQFcpDWQySM1EiNwZjZAsvMvzIe1xpvAUD7l04=' 'sha256-+OrY7Y6i4dAdqzR+G2X/nGs6eRSt8+EvDVinkAn3ATc=' https://eu-assets.i.posthog.com https://*.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://googleads.g.doubleclick.net https://analytics.tiktok.com https://*.contentabc.com https://*.wnu.com 'nonce-Rg3H2rnJ/6iYTIT3Q/djIA==';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;img-src 'self' data: blob: https://media.mistrezz.ai https://media-staging.mistrezz.ai https://media-beta.mistrezz.ai https://static.mistrezz.ai https://static-staging.mistrezz.ai https://static-beta.mistrezz- strict-transport-security
max-age=31536000; includeSubDomains- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
same-origin