indexo.dev

sourcetreeapp.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 3224 ms crawled 2026-05-19

US · 13.227.180.4 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Sourcetreeapp
Language
en
Canonical
https://www.sourcetreeapp.com
Translations
  • de
  • es
  • fr
  • it
  • ja
  • ko
  • nl
  • pl
  • pt
  • ru
  • zh

Technology

CDN
Amazon CloudFront
Server
AtlassianEdge
CMS
Joomla

Third-party hosts loaded (4)

  • wac-web.prod-east.frontend.public.atl-paas.net×24
  • wac-cdn.atlassian.com×21
  • ds-cdn.prod-east.frontend.public.atl-paas.net×3
  • atl-onetrust-wrapper.atlassian.com×1

Social

Contact

Address
350 Bush Street, Floor 13, 94104, San Francisco, CA, US

Registration

Registrar
MarkMonitor Inc.
Created
2010-09-06
Expires
2027-09-06 474 days left
Updated
2025-08-05
Name servers
  • ns-1476.awsdns-56.org
  • ns-1806.awsdns-33.co.uk
  • ns-488.awsdns-61.com
  • ns-935.awsdns-52.net

DNS records live

NS
  • ns-1476.awsdns-56.org
  • ns-1806.awsdns-33.co.uk
  • ns-488.awsdns-61.com
  • ns-935.awsdns-52.net
MX
  • 10 mail.metronet.co.uk
  • 20 mail1.metronet.co.uk
  • 4 mail.just-the-name.co.uk
TXT
  • rzx63xq6d16q90v36yx5zvvj9jh99l63

Email authentication weak

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04
from 2026-05-13 to 2026-11-27
Expires in 191 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://sourcetreeapp.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
base-uri 'self'; default-src 'self' *.atlassian.com *.intercomcdn.com *.orangelogic.com *.6sc.co *.6sense.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org; script-src 'self' *.gstatic.com *.cookielaw.org *.public.atl-paas.net *.prod.atl-paas.net *.googletagmanager.com *.marketo.net *.atlassian.com utt.impactcdn.com *.google.com *.doubleclick.com *.googleadservices.com *.livechatinc.com *.bing.com *.quora.com *.yimg.jp *.clicktale.net *.linkedin.com *.twitter.com *.licdn.com *.demandbase.com *.doubleclick.net *.facebook.net *.redditstatic.com *.clearbitscripts.com *.clarity.ms *.vimeo.com *.google-analytics.com facebook.com *.facebook.com impactcdn.com *.impactcdn.com clearbitjs.com *.clearbitjs.com yahoo.co.jp *.yahoo.co.jp *.recaptcha.net *.ads-twitter.com *.intercom.io *.intercomcdn.com *.jsdelivr.net *.6sc.co *.6sense.com *.techtarget.com *.capterra.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org 'unsafe-eval' 'unsafe-inline'; style-src
strict-transport-security
max-age=63072000; preload

Links to (5)

Linked from (3)