indexo.dev

universaleverything.io

.io crawl

First seen 2026-04-14 · Last seen 2026-05-05 · ok HTTP/1.1 200 166 ms crawled 2026-05-07

US · 188.114.97.3 · AS13335 Cloudflare, Inc.

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
Universal Everything
Description
Explore Universal Profiles and view all your assets in one place as well as send and receive tokens to other Universal Profile users.

Open Graph

url
https://universaleverything.io
title
Universal Everything
description
Explore Universal Profiles and view all your assets in one place as well as send and receive tokens to other Universal Profile users.

Technology

CDN
Cloudflare
CMS
Nuxt

Third-party hosts loaded (1)

  • min-api.cryptocompare.com×1

DNS records live

NS
  • damon.ns.cloudflare.com
  • luciane.ns.cloudflare.com
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
Verified for
  • Google

Email authentication weak

SPF
v=spf1 include:_spf.google.com ~all
softfail (~all)
DMARC
not published
DKIM
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC1T+yL2hjP+RkJL+9r4c+rTDjJkfYcFkwPe6mPwMAJPzN2Z0xk8Y7lqt6Iy2cA+UgVP3dW+PLko3+…
selectors probed

Certificate (current)

WE1
from 2026-04-22 to 2026-07-22
Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://universaleverything.io/

present
  • content-security-policy-report-only
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy-report-only
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; frame-src https: http://localhost:* 'self'; frame-ancestors 'self'; connect-src 'self' https: wss:; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self';

Linked from (1)