mtgal.com

.com crawl

First seen 2026-04-12 · Last seen 2026-05-10 · ok HTTP/1.1 200 5090 ms crawled 2026-05-06

US · 104.18.19.105 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: 먹튀갤
Description: 먹튀갤은 실시간 데이터를 바탕으로 다양한 먹튀사이트와 토토사이트를 분석합니다. 사용자 중심의 먹튀검증 커뮤니티에서 안전한 토토 이용 정보를 확인해보세요.
Language: ko
Canonical: https://mtgal.com/krmain.php

Open Graph

url: https://mtgal.com/krmain.php
title: 먹튀갤
locale: ko_KR
site name: 먹튀갤
description: 먹튀갤은 실시간 데이터를 바탕으로 다양한 먹튀사이트와 토토사이트를 분석합니다. 사용자 중심의 먹튀검증 커뮤니티에서 안전한 토토 이용 정보를 확인해보세요.
rich attachment: true

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights

Third-party hosts loaded (2)

static.cloudflareinsights.com×1
www.googletaganalytics.com×1

Contact

Phone

+82 010 1235 2678

Registration

Registrar

NameCheap, Inc.

Created

2023-11-23

Expires

2026-11-23 188 days left

Updated

2025-06-03

Name servers

chan.ns.cloudflare.com
keenan.ns.cloudflare.com

DNS records live

NS

chan.ns.cloudflare.com
keenan.ns.cloudflare.com

TXT

google-site-verification=v53G9nSJBWoqJzBML3GJ34FzmMdwUS8DZz0-x6RqlLY globalsign-domain-verification=E09739AB3191E067ED84C860F4679AD6

Certificate (current)

WE1

from 2026-03-25 to 2026-06-24

Expires in 36 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://mtgal.com/krmain.php

present

content-security-policy
x-frame-options
referrer-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.googletaganalytics.com https://www.google-analytics.com https://static.cloudflareinsights.com https://ajax.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://ajax.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https:; form-action 'self' https:; object-src 'none'; frame-ancestors 'self'; base-uri 'self'