narratively.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Gatsby
- Analytics
-
- Cloudflare Insights
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- substackcdn.com×282
- fonts.gstatic.com×1
- js.sentry-cdn.com×1
- static.cloudflareinsights.com×1
Social
Registration
- Registrar
- Cloudflare, Inc.
- Created
- 2010-03-09
- Expires
- 2027-03-09 293 days left
- Updated
- 2026-02-12
- Name servers
-
- kara.ns.cloudflare.com
- terin.ns.cloudflare.com
DNS records live
- NS
-
- kara.ns.cloudflare.com
- terin.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
google-site-verification=B9_5qvaf3Q2vbgJ44ALVouoDWz9xnE0mkxoIvB-6Dacgoogle-site-verification=i_STEUigl-25FGs2WyQscdn8X7w4Miy7xOKzYtzqZJY
Email authentication partial
- SPF
-
v=spf1 include:_spf.google.com include:_spf.createsend.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiThOmRtC1KIvvit2rysd24qlg0gGn46Hz3Ja9s7IpLbhdogWT0hO3pRvJrXsiDkHkUI/pQyVEEbO/2…
selectors probed - google:
Certificate (current)
WE1
Expires in 47 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
frame-ancestors 'self' https://*.substack.com https://substack.com- strict-transport-security
max-age=31536000; includeSubDomains; preload