redsnake.io
HTML metadata
Technology
- Server
- nginx
DNS records live
- NS
-
- ns1qsy.name.com
- ns2nsw.name.com
- ns3qtx.name.com
- ns4jpz.name.com
- MX
-
- 20 mail.hexgroup.net
Email authentication strong
- SPF
-
v=spf1 a mx include:spf.tipimail.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; pct=100;policy: quarantine - DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 36 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
same-origin- x-frame-options
DENY- permissions-policy
interest-cohort=()- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests;script-src 'self' 'wasm-unsafe-eval';connect-src 'self' blob: https://redsnake.io wss://redsnake.io https:;media-src 'self' https:;img-src 'self' data: blob: https:;default-src 'none';base-uri 'self';frame-ancestors 'none';style-src 'self' 'unsafe-inline';font-src 'self';manifest-src 'self';frame-src 'self' https:;