soniqtools.com

HTML metadata

Title

SoniqTools — Free Online Audio Tools

Description

Free browser-based audio tools — analyze, convert, trim, merge, compress and more. No uploads, no signup. Everything runs locally in your browser.

Language

en

Canonical

https://soniqtools.com/

Translations

de
en
es
fr
it
ja
ko
pt
ru
zh

Open Graph

url: https://soniqtools.com/
title: SoniqTools — Free Online Audio Tools
locale: en_US
site name: SoniqTools
description: Free browser-based audio tools — analyze, convert, trim, merge, compress and more. No uploads, no signup. Everything runs locally in your browser.

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Cloudflare Insights
Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (30)

cdn.prod.website-files.com×2
fonts.cdnfonts.com×2
fonts.googleapis.com×2
acidtools.com×1
agentwork.tools×1
aiagentsdirectory.com×1
aiboom.tools×1
aitechviral.com×1
api.producthunt.com×1
appalist.com×1
deeplaunch.io×1
earlyhunt.com×1
fazier.com×1
findly.tools×1
fonts.gstatic.com×1
ideakiln.com×1
indiehunt.io×1
shinylaunch.com×1
showmebest.ai×1
startupfa.me×1
startupfa.st×1
static.cloudflareinsights.com×1
submitaitools.org×1
toolfio.com×1
twelve.tools×1
unitelist.com×1
weliketools.com×1
wired.business×1
www.foundrlist.com×1
www.googletagmanager.com×1

Registration

Registrar

Cloudflare, Inc.

Created

2026-03-12

Expires

2027-03-12 294 days left

Updated

2026-03-12

Name servers

marvin.ns.cloudflare.com
nelci.ns.cloudflare.com

DNS records live

NS

marvin.ns.cloudflare.com
nelci.ns.cloudflare.com

MX

10 route2.mx.cloudflare.net
35 route1.mx.cloudflare.net
42 route3.mx.cloudflare.net

Verified for

Google

Email authentication weak

SPF: v=spf1 include:_spf.mx.cloudflare.net ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-16 to 2026-08-14

Expires in 85 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://soniqtools.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://unpkg.com https://www.googletagmanager.com https://static.cloudflareinsights.com blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.cdnfonts.com; font-src 'self' https://fonts.gstatic.com https://fonts.cdnfonts.com; connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://audiolens-api.groove00.workers.dev https://audiolens-geo.groove00.workers.dev https://audiolens-counter.groove00.workers.dev https://musicbrainz.org https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://cloudflareinsights.com blob:; img-src 'self' data: blob:; media-src 'self' blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'
strict-transport-security: max-age=31536000; includeSubDomains