speedcart.app

HTML metadata

Technology

CDN

Cloudflare

Analytics

• Google Tag Manager

Third-party hosts loaded (1)

• www.googletagmanager.com×1

DNS records live

NS

• dean.ns.cloudflare.com
• tara.ns.cloudflare.com

MX

Show 7 MX records

• 10 eforward1.registrar-servers.com
• 10 eforward2.registrar-servers.com
• 10 eforward3.registrar-servers.com
• 10 mx1.privateemail.com
• 10 mx2.privateemail.com
• 15 eforward4.registrar-servers.com
• 20 eforward5.registrar-servers.com

Verified for

• Brevo

Email authentication weak

SPF

v=spf1 include:spf.privateemail.com ~all

softfail (~all) · multiple SPF records

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

• default: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZRsF3vzzen1do/JcK4uLx2NNZZq0DiDfWwZemhTZeC1TAMA1456PT/q2GOBySNVCwaSMnqJTGYFFgH0…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://speedcart.app/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• themeim.com×2