thethingsnetwork.org

HTML metadata

Title: The Things Network
Description: The Things Network
Language: en

Open Graph

url: https://www.thethingsnetwork.org/
title: The Things Network
site name: The Things Network
description: We are building a global open free crowdsourced long range low battery IoT data network.

Technology

CDN: Amazon CloudFront
Server: nginx
CMS: Gatsby

Fonts

Google Fonts

Social widgets

Vimeo Embed
YouTube Embed

Third-party hosts loaded (6)

unpkg.com×3
cdn.jsdelivr.net×1
cdnjs.cloudflare.com×1
fonts.googleapis.com×1
player.vimeo.com×1
www.youtube.com×1

Social

Registration

Registrar

Key-Systems GmbH

Created

2015-07-16

Expires

2026-07-16 57 days left

Updated

2025-11-24

Name servers

ns-1459.awsdns-54.org
ns-1924.awsdns-48.co.uk
ns-440.awsdns-55.com
ns-578.awsdns-08.net

DNS records live

NS

ns-1459.awsdns-54.org
ns-1924.awsdns-48.co.uk
ns-440.awsdns-55.com
ns-578.awsdns-08.net

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=KQlguzNilWBiX5a5uZRAx45tSL1Oi-tZ7XJeTfyNw5Y

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:sendgrid.net include:servers.mcsv.net -all

strict (-all)

DMARC

v=DMARC1; p=quarantine

policy: quarantine

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q/j/SlqJ9R6EOdceRA8W5yTl9tlf1ML7ZCWmK+zwxBbV/C/TkzR62NXAynCzN9eQH8labzDhtLHNBPllZ…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDhLi8n9timNC+Y50A89CnAFVPTM4QnuDYQ2xuNLr86w8cIeld/0vVDoYCZESEucwFmutJnaonWdKiM1fkxvWAF+8…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-12-30 to 2027-01-28

Expires in 253 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.thethingsnetwork.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: img-src * data:; connect-src 'self' shop.spreadshirt.nl www.google-analytics.com www.thethingsnetwork.org vx.thethings.network api.intercom.io api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com app.getsentry.com mapper.packetbroker.net nominatim.openstreetmap.org/ stats.g.doubleclick.net unpkg.com/boxicons@2.1.1/; style-src 'self' 'unsafe-inline' assets.adobedtm.com cdn.linearicons.com fonts.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com shop.spreadshirt.nl ton.twimg.com cdnjs.cloudflare.com code.jquery.com unpkg.com; frame-src 'self' www.youtube.com player.vimeo.com podio.com www.youtube-nocookie.com www.classmarker.com pdf.classmarker.com js.stripe.com; default-src 'self'; font-src 'self' cdn.linearicons.com fonts.gstatic.com maxcdn.bootstrapcdn
strict-transport-security: max-age=31536000