indexo.dev

racknload.com

.com crawl

First seen 2026-04-25 · Last seen 2026-05-15 · ok HTTP/1.1 200 2047 ms crawled 2026-05-18

DE · 148.251.176.148 · AS24940 Hetzner Online GmbH

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
RACKNLOAD - Shooting Sports Social Network
Description
Shooting Sports Social Network
Language
en-GB
Generator
All in One SEO (AIOSEO) 4.9.6.2
Canonical
https://racknload.com/
Feeds

Open Graph

url
https://racknload.com/
title
RACKNLOAD - Shooting Sports Social Network
locale
en_GB
site name
RACKNLOAD - Shooting Sports Social Network
description
Shooting Sports Social Network

Technology

Server
LiteSpeed
CMS
WordPress
Fonts
  • Font Awesome

Third-party hosts loaded (5)

  • cdn.onesignal.com×2
  • cdnjs.cloudflare.com×2
  • code.jquery.com×2
  • use.fontawesome.com×2
  • gmpg.org×1

Social

Registration

Registrar
GoDaddy.com, LLC
Created
2011-12-05
Expires
2026-12-05 200 days left
Updated
2025-12-06
Name servers
  • sofia.ns.cloudflare.com
  • yichun.ns.cloudflare.com

DNS records live

NS
  • sofia.ns.cloudflare.com
  • yichun.ns.cloudflare.com
MX
  • 10 mx.zoho.eu
  • 20 mx2.zoho.eu
  • 50 mx3.zoho.eu
TXT
  • zoho-verification=zb15775640.zmverify.zoho.eu
  • google-site-verification=x-J_8RkQRIUe81pP6fHpod3cfUj9H42xkOd6W1HJU8A

Email authentication partial

SPF
v=spf1 include:zoho.eu ~all
softfail (~all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-03-24 to 2026-06-22
Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://racknload.com/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; media-src 'self' blob: https:; connect-src 'self' https://api.giphy.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com; object-src 'none'; base-uri 'self'; form-action 'self'

Links to (3)

Linked from (1)