thecarlatreport.com

HTML metadata

Technology

Server

nginx

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (4)

• fonts.googleapis.com×4
• unpkg.com×1
• www.googletagmanager.com×1
• www.googletagservices.com×1

Social

• twitter
• facebook
• linkedin

Contact

Email

• carlat@thecarlatreport.com
• reportcontactcarlat@thecarlatreport.com
• contactcarlat@thecarlatreport.com

Phone

• 866-348-9279

Registration

Registrar

GoDaddy.com, LLC

Created

2002-12-21

Expires

2026-12-21 214 days left

Updated

2025-12-21

Name servers

• ns65.domaincontrol.com
• ns66.domaincontrol.com

DNS records live

NS

• ns65.domaincontrol.com
• ns66.domaincontrol.com

MX

• 10 aspmx.l.google.com
• 20 alt1.aspmx.l.google.com
• 30 aspmx2.googlemail.com
• 30 aspmx3.googlemail.com

TXT

• g9262s0drar908j4pgaif38gcb

Verified for

• Google

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:servers.mcsv.net a mx ip4:45.33.71.232 ip6:2600:3c03::f03c:91ff:feb0:4a9c ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:notifications@thecarlatreport.com; sp=quarantine; adkim=r; aspf=r

policy: quarantine · sp=quarantine

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14TUMHnuzVfKK4OKoTC2W7CBc2J+0Cp8jyORh4X52amXrshCOyvyOOxozKu42AkUNsY8m2p8mab0m/…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.thecarlatreport.com/

present

• strict-transport-security
• content-security-policy
• x-frame-options
• x-content-type-options

findings

• CSP uses wildcard sources
• missing Referrer Policy
• missing Permissions Policy

Links to (3)

• facebook.com×3
• linkedin.com×3
• twitter.com×3

Linked from (1)

• slatestarcodex.com×3