nibblesandfeasts.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Analytics
-
- Cloudflare Insights
- Google Tag Manager
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (13)
- i.ytimg.com×3
- www.youtube.com×3
- scripts.mediavine.com×2
- stats.wp.com×2
- cdn.gtranslate.net×1
- gmpg.org×1
- jetpack.wordpress.com×1
- public-api.wordpress.com×1
- s0.wp.com×1
- secure.gravatar.com×1
- static.cloudflareinsights.com×1
- v0.wordpress.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- eNom, LLC
- Created
- 2010-09-16
- Expires
- 2026-09-16 119 days left
- Updated
- 2025-10-27
- Name servers
-
- alec.ns.cloudflare.com
- hope.ns.cloudflare.com
DNS records live
- NS
-
- alec.ns.cloudflare.com
- hope.ns.cloudflare.com
- MX
-
- 0 mail.nibblesandfeasts.com
- TXT
-
globalsign-domain-verification=C83295B172C91671ACA433FBCD64B593google-site-verification=dQsEPWziOWTkppzMChshF_QbbxJUatzdEDn4ppboeJ8
Email authentication weak
- SPF
-
v=spf1 a mx ptr include:bluehost.com ?allneutral (?all) - DMARC
- not published
- DKIM
-
- default:
k=rsa; p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAPws29z2dRG3yihM4ltVieZLzjQeCvDbjw6yw/eqilXWvILi++crSnYye/1E8eY0T3jkki0ZWySfksrNXz5cx547bV+HQHU6sKI…
selectors probed - default:
Certificate (current)
E7
Expires in 64 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- weak frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin, strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN, SAMEORIGIN- permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")- x-content-type-options
nosniff- content-security-policy
block-all-mixed-content, block-all-mixed-content;- strict-transport-security
max-age=15552000; preload