thinkeru.org — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Welcome - The Course | ThinkerU
Description: Welcome to ThinkerU — discover The Course, the modern way to learn critical thinking, reasoning, and argumentation.
Language: en

Open Graph

title: Welcome - The Course | ThinkerU
locale: en_US
site name: ThinkerU
description: Welcome to ThinkerU — discover The Course, the modern way to learn critical thinking, reasoning, and argumentation.

Technology

CDN: Cloudflare
CMS: Next.js

DNS records live

NS

andy.ns.cloudflare.com
dolly.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google

Email authentication strong

SPF

v=spf1 include:mailgun.org include:_spf.google.com include:servers.mcsv.net include:dc-aa8e722993._spfm.thinkeru.org ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:383719230cd9434ba8f2f56e072c2181@dmarc-reports.cloudflare.net,mailto:dmarc_rua@onsecureserver.net;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKzI3iPssP18kN+zTsQ811Yx1ulTXj0yg79ixgG160u+6yJuCtGEocKDjz1ntWdYQSjnGIRMwZxBi5…

selectors probed

Certificate (current)

E8

from 2026-05-11 to 2026-08-09

Expires in 66 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://learn.thinkeru.org/cover

present

content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://client.crisp.chat https://js.stripe.com; style-src 'self' 'unsafe-inline' https://*.crisp.chat https://fonts.googleapis.com; img-src 'self' data: blob: https: http://learn.thinkeru.org:* https://learn.thinkeru.org:*; media-src 'self' blob: https: http://learn.thinkeru.org:* https://learn.thinkeru.org:*; font-src 'self' https://*.crisp.chat https://fonts.gstatic.com; connect-src 'self' https://learn.thinkeru.org http://learn.thinkeru.org:* https://learn.thinkeru.org:* https://*.crisp.chat wss://*.crisp.chat https://api.stripe.com; frame-src 'self' https://www.youtube.com https://youtube.com https://player.vimeo.com https://vimeo.com https://*.crisp.chat https://js.stripe.com; worker-src 'self' blob:; object-src 'none'; frame-ancestors 'self' https://thinkarguments.org; base-uri 'self';