serverhunter.com
HTML metadata
Technology
- CDN
- Cloudflare
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Social
Registration
- Registrar
- Porkbun LLC
- Created
- 2013-05-18
- Expires
- 2032-05-18 2178 days left
- Updated
- 2023-04-19
- Name servers
-
- anna.ns.cloudflare.com
- terry.ns.cloudflare.com
DNS records live
- NS
-
- anna.ns.cloudflare.com
- terry.ns.cloudflare.com
- MX
-
- 41 linda.mx.cloudflare.net
- 64 isaac.mx.cloudflare.net
- 97 amir.mx.cloudflare.net
- TXT
-
SERVERHUNTER-WOTL4GQV
- Verified for
-
Email authentication strong
- SPF
-
v=spf1 include:_spf.google.com include:amazonses.com include:_spf.mx.cloudflare.net -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@serverhunter.com; ruf=mailto:dmarc@serverhunter.com; fo=1;policy: reject (enforced) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBpYX55C1hpbA3sKcsCpnJZoSmn+RV8NGKnF+QVSPVOkorx1xTHOLd0Y/q814iTLEqgDzxyG2Hhn2N…
selectors probed - google:
Certificate (current)
WE1
Expires in 32 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
default-src 'self';script-src 'self' https://static.serverhunter.com/ 'sha256-6KdvO+SVNR+TQm3Jn8kw/QbzngLSXn0L4Mi6VCujI4o=' https://challenges.cloudflare.com/ static.hotjar.com script.hotjar.com https://*.googletagmanager.com;style-src 'self' https://static.serverhunter.com/ 'unsafe-inline' data:;img-src 'self' https://static.serverhunter.com/ data: script.hotjar.com https://*.google-analytics.com https://*.googletagmanager.com;font-src 'self' https://static.serverhunter.com/ data: https://fonts.gstatic.com/ script.hotjar.com;frame-src 'self' https://challenges.cloudflare.com/ vars.hotjar.com;connect-src 'self' https://sentry.io/ *.serverhunter.com in.hotjar.com wss://*.hotjar.com surveystats.hotjar.com vc.hotjar.com *.hotjar.com:* https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com;object-src 'self';form-action 'self';manifest-src 'self' https://static.serverhunter.com/;frame-ancestors 'none';upgrade-insecure-requests;block-all-mixed-content;sa- strict-transport-security
max-age=31536000; includeSubDomains; preload