oneclicktrading.com

.com crawl

First seen 2026-04-17 · Last seen 2026-05-08 · ok HTTP/1.1 200 571 ms crawled 2026-05-12

US · 18.165.140.28 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Language: en

Technology

CDN: Amazon CloudFront
Server: CloudFront
CMS: Next.js

Registration

Registrar

InterNetX GmbH

Created

2008-12-17

Expires

2026-12-17 211 days left

Updated

2026-05-05

Name servers

ns-1143.awsdns-14.org
ns-160.awsdns-20.com
ns-1606.awsdns-08.co.uk
ns-858.awsdns-43.net

DNS records live

NS

ns-1143.awsdns-14.org
ns-160.awsdns-20.com
ns-1606.awsdns-08.co.uk
ns-858.awsdns-43.net

MX

10 mx01.hornetsecurity.com
20 mx02.hornetsecurity.com
30 mx03.hornetsecurity.com
40 mx04.hornetsecurity.com

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc-abuse@pl-x.de;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mNDJ8rGtpmLk3t8gqWLru5uMnJBnSjeXdmpp12o0sJ5KYQrVCFeS1J2EIxtJpLR5uvO3UuKxUsgPK…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-05-05 to 2026-11-19

Expires in 183 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://oneclicktrading.com/

present

strict-transport-security
content-security-policy
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Permissions Policy

Header values

referrer-policy: unsafe-url
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.48bytesnorth.com https://cdn.48bytesnorth.de https://*.posthog.com https://static.px-learning.de https://analytics.48bytesnorth.com https://cdn.embedly.com https://svc.webspellchecker.net https://code.jquery.com https://cdn.datatables.net https://cboe-web-widget.s3.amazonaws.com; style-src 'self' 'unsafe-inline' data: https://*.posthog.com https://cdn.jsdelivr.net https://static.px-learning.de https://analytics.48bytesnorth.com https://fonts.googleapis.com https://cdn.datatables.net https://cboe-web-widget.s3.amazonaws.com; font-src 'self' data: https://cdn.jsdelivr.net https://fonts.gstatic.com https://cdn.48bytesnorth.com; img-src 'self' blob: data: https://cdn.48bytesnorth.de https://cdn.48bytesnorth.com https://*.posthog.com https://static.px-learning.de https://i.vimeocdn.com https://*.oneclicktrading.com; frame-src 'self' blob: https://finmc-my.sharepoint.com https://tuccitrades.com https://*.google.c
strict-transport-security: max-age=31536000