openloot.com — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Home | Open Loot
Description: The #1 place to trade game NFTs
Language: en

Open Graph

url: https://openloot.com/
title: Open Loot NFT Marketplace
description: The #1 place to trade game NFTs

Technology

CDN: Cloudflare
CMS: Next.js
JS framework: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (2)

static.zdassets.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

easyDNS Technologies Inc.

Created

2010-06-04

Expires

2027-06-04 358 days left

Updated

2026-05-05

Name servers

chase.ns.cloudflare.com
laila.ns.cloudflare.com

DNS records live

NS

chase.ns.cloudflare.com
laila.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

oneuptime-verification-uoiMsxftPePjJmenzgBb

Verified for

Atlassian
Brevo
Google

Email authentication strong

SPF

v=spf1 include:mail.zendesk.com include:_spf.google.com ip4:45.159.6.240/29 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; adkim=s; aspf=s; pct=100; rua=mailto:ericfolch@openloot.com; ruf=mailto:ericfolch@openloot.com; fo=1

policy: quarantine · sp=quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFiloxFXEYe53HfZjeq7VvW7Og2cL1/5Va6D8KQRjgOzO/G8AlJtdfwIpPICq/X71h7SvdObfrlUgA…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

WE1

from 2026-04-29 to 2026-07-28

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://openloot.com/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy

findings

missing Content Security Policy
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: DENY
x-content-type-options: nosniff
strict-transport-security: max-age=63072000
cross-origin-opener-policy: same-origin
content-security-policy-report-only: default-src 'self'; script-src 'self' https://vercel.live https://www.googletagmanager.com https://beacon.riskified.com https://static.moonpay.com https://cdn.checkout.com https://s3.tradingview.com https://static.zdassets.com https://cdn.gsght.com https://connect.facebook.net https://www.google-analytics.com https://www.redditstatic.com 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' * https://listing-api.openloot.com https://vault-api.openloot.com https://auth-api.openloot.com https://www.google-analytics.com; frame-src 'self' https://vercel.live https://export.turnkey.com/ https://auth.turnkey.com/ https://s3.tradingview.com https://www.tradingview-widget.com https://buy.moonpay.com https://buy-sandbox.moonpay.com https://www.googletagmanager.com; img-src 'self' https: data:; media-src 'self' https:; font-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self' https://auth-api.openloo

Links to (3)

Linked from (1)

chainers.io×1

Use this data via API

Everything on this page for openloot.com is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/openloot.com" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →