theunsubscribed.co
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Gatsby
- Analytics
-
- Cloudflare Insights
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- substackcdn.com×255
- fonts.gstatic.com×1
- js.sentry-cdn.com×1
- static.cloudflareinsights.com×1
DNS records live
- NS
-
- ns55.domaincontrol.com
- ns56.domaincontrol.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
google-site-verification=ZKGmUfDw_8ea90_Ev7Tbrcwht5TBA5mF9flTMsFFNQI
Email authentication strong
- SPF
-
v=spf1 include:dc-aa8e722993._spfm.theunsubscribed.co ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net;policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 56 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
frame-ancestors 'self' https://*.substack.com https://substack.com- strict-transport-security
max-age=31536000; includeSubDomains; preload