indexo.dev

tarotworld.com

.com crawl

First seen 2026-04-17 · Last seen 2026-05-15 · ok HTTP/1.1 200 3402 ms crawled 2026-05-12

DE · 148.251.112.241 · AS24940 Hetzner Online GmbH

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Tarotworld
Language
en-US
Generator
Powered by WPBakery Page Builder - drag and drop page builder for WordPress.
Canonical
https://www.tarotworld.com/
Feeds

Technology

Server
nginx
CMS
WordPress

Third-party hosts loaded (1)

  • gmpg.org×1

Social

Registration

Registrar
101domain GRS Limited
Created
1997-04-16
Expires
2027-04-17 332 days left
Updated
2026-02-16
Name servers
  • ns1.101domain.com
  • ns2.101domain.com
  • ns5.101domain.com

DNS records live

NS
  • ns1.101domain.com
  • ns2.101domain.com
  • ns5.101domain.com

Email authentication no MX

SPF
v=spf1 -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:728ec9044bda281@rep.dmarcanalyzer.com; ruf=mailto:728ec9044bda281@for.dmarcanalyzer.com; sp=reject; fo=1;
policy: reject (enforced) · sp=reject
DKIM
no key found at common selectors

Certificate (current)

ZeroSSL RSA DV SSL CA 2
from 2026-05-08 to 2026-08-07
Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.tarotworld.com/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (5)

Linked from (1)