indexo.dev

sealednote.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-08 · ok HTTP/1.1 200 1159 ms crawled 2026-05-08

US · 216.198.79.1 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
SealedNote - Anonymous feedback, filtered and encrypted
Description
Receive anonymous feedback that is filtered by AI and encrypted for your privacy
Language
en

Technology

CDN
Vercel
CMS
Next.js

Social

Registration

Registrar
NameCheap, Inc.
Created
2025-09-08
Expires
2026-09-08 110 days left
Updated
2025-09-08
Name servers
  • dns1.registrar-servers.com
  • dns2.registrar-servers.com

DNS records live

NS
  • dns1.registrar-servers.com
  • dns2.registrar-servers.com
MX
  • 10 eforward1.registrar-servers.com
  • 10 eforward2.registrar-servers.com
  • 10 eforward3.registrar-servers.com
  • 15 eforward4.registrar-servers.com
  • 20 eforward5.registrar-servers.com

Email authentication weak

SPF
v=spf1 include:spf.efwd.registrar-servers.com ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-03-13 to 2026-06-11
Expires in 21 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.sealednote.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
DENY
permissions-policy
geolocation=(), microphone=(), camera=(), payment=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'nonce-NDgzYzMwNzAtMTI3OS00YzNlLTlkZDAtMjY5ZTc5OGY0YjE1' 'strict-dynamic'; style-src 'self' 'nonce-NDgzYzMwNzAtMTI3OS00YzNlLTlkZDAtMjY5ZTc5OGY0YjE1' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://openrouter.ai https://api.openrouter.ai ; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests;
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (1)

Linked from (1)