indexo.dev

renthood.net

.net crawl

First seen 2026-05-29 · Last seen 2026-05-29 · ok HTTP/1.1 200 509 ms crawled 2026-05-31

US · 34.111.179.208 · AS396982 Google LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
RentHood - Tools, Services & Community Hub
Description
RentHood - Community platform for tool sharing and contractor services. Connect with neighbors, share resources, and find trusted service providers.
Language
en

Technology

Server
Google

Registration

Registrar
IONOS SE
Created
2020-08-18
Expires
2026-08-18 73 days left
Updated
2025-08-19
Name servers
  • ns1053.ui-dns.com
  • ns1054.ui-dns.org
  • ns1095.ui-dns.de
  • ns1114.ui-dns.biz

DNS records live

NS
  • ns1053.ui-dns.com
  • ns1054.ui-dns.org
  • ns1095.ui-dns.de
  • ns1114.ui-dns.biz
MX
  • 10 mx.zoho.com
  • 20 mx2.zoho.com
  • 50 mx3.zoho.com
TXT
  • replit-verify=e46e89f8-8dad-472a-a424-87e940db917c

Email authentication partial

SPF
v=spf1 include:zohomail.com include:amazonses.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:help@renthood.net
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-04-06 to 2026-07-05
Expires in 29 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://renthood.net/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
no-referrer
x-frame-options
SAMEORIGIN
permissions-policy
camera=self, microphone=self, display-capture=*
x-content-type-options
nosniff
content-security-policy
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;img-src 'self' data: blob: https: http:;font-src 'self' https://fonts.gstatic.com;connect-src 'self' https://www.google-analytics.com https://api.stripe.com wss: ws:;frame-src 'self' https://www.google.com https://js.stripe.com;object-src 'none';upgrade-insecure-requests;base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none'
strict-transport-security
max-age=63072000; includeSubDomains, max-age=31536000; includeSubDomains
cross-origin-opener-policy
same-origin
cross-origin-resource-policy
cross-origin

Linked from (1)