oddisea-superfrozen.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- jQuery
- 3.6.0
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (4)
- translate.google.com×2
- use.typekit.net×2
- ajax.googleapis.com×1
- www.googletagmanager.com×1
Registration
- Registrar
- Squarespace Domains LLC
- Created
- 2025-04-08
- Expires
- 2028-04-08 675 days left
- Updated
- 2025-04-08
- Name servers
-
- ns-cloud-e1.googledomains.com
- ns-cloud-e2.googledomains.com
- ns-cloud-e3.googledomains.com
- ns-cloud-e4.googledomains.com
DNS records live
- NS
-
- ns-cloud-e1.googledomains.com
- ns-cloud-e2.googledomains.com
- ns-cloud-e3.googledomains.com
- ns-cloud-e4.googledomains.com
- MX
-
- 1 smtp.google.com
- TXT
-
asv_domain=dfc0b18021931f91615020187055678a
- Verified for
-
- Zoho
Email authentication weak
- SPF
-
v=spf1 include:_spf.google.com include:one.zoho.com include:zcsend.net ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoh+q5mguBM0K27jYNYzk2zuHHthUA8B7DeKSPNPBLSMQMtNDNNYkjqUQxMMhdAefc8E9w2ahlpbQZ…
selectors probed - google:
Certificate (current)
E8
Expires in 55 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self'; connect-src 'self' www.google-analytics.com *.lottiefiles.com translate.googleapis.com; object-src 'none'; img-src 'self' mgtemplate.wpengine.com p.typekit.net www.googletagmanager.com www.google-analytics.com secure.gravatar.com data: *.gravatar.com https://translate.google.com/ https://translate.googleapis.com/ https://www.gstatic.com/images/branding/ https://www.google.com/images/ https://fonts.gstatic.com/; script-src 'unsafe-inline' 'self' use.typekit.net ajax.googleapis.com www.googletagmanager.com www.google-analytics.com https://unpkg.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://translate.google.com/ https://translate.googleapis.com/ https://translate-pa.googleapis.com; style-src 'unsafe-inline' 'self' https://translate.google.com/ https://translate.googleapis.com/ https://www.gstatic.com/; font-src 'self' data: *.typekit.net; frame-src 'self' *.youtube.com www.google.com; default-src 'self'- strict-transport-security
max-age=63072000; includeSubDomains