indexo.dev

unvarnished.com

.com crawl

First seen 2026-04-13 · Last seen 2026-04-13 · ok HTTP/1.1 200 1057 ms crawled 2026-05-07

US · 188.114.96.3 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Unvarnished, A Blog by Travis Smith
Description
Travis Smith is the owner of Hop Studios, a Web design and development company. He's an expert in ExpressionEngine and helps run the Vancouver Ultimate League. This blog is his unvarnished view of the world.
Feeds

Technology

CDN
Cloudflare
Analytics
  • Statcounter

Third-party hosts loaded (3)

  • feeds2.feedburner.com×4
  • c.statcounter.com×1
  • www.flickr.com×1

Registration

Registrar
NameCheap, Inc.
Created
2001-12-28
Expires
2030-01-26 1348 days left
Updated
2024-05-13
Name servers
  • asa.ns.cloudflare.com
  • gabe.ns.cloudflare.com

DNS records live

NS
  • asa.ns.cloudflare.com
  • gabe.ns.cloudflare.com
MX
  • 10 mx1.forwardemail.net
  • 10 mx2.forwardemail.net
TXT
  • google-site-verification=CBuzWr1yyK3bGRjBLcApaCP3k8mfe524nrOo6uccQRU
  • forward-email-site-verification=28dosxszOG

Email authentication strong

SPF
v=spf1 a mx include:_spf.google.com include:spf.forwardemail.net -all
strict (-all)
DMARC
v=DMARC1; p=reject; pct=100; rua=mailto:97d7741a15e1463898f196b7b1666644@dmarc-reports.cloudflare.net,mailto:dmarc-699599deac993721e9df8108@forwardemail.net; fo=0:1:s:d
policy: reject (enforced)
DKIM
  • default: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXdKdP3n0jSv/oTyCHaUzCZtP9H4AEQQkvojpYP0ZetIuo5J9N1zOeVoIptH9GAF9qAzX6kbK7THNmnO…
selectors probed

Certificate (current)

WE1
from 2026-04-21 to 2026-07-21
Expires in 63 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://unvarnished.com/

present
  • content-security-policy-report-only
  • x-frame-options
findings
  • missing HSTS
  • missing Content Security Policy
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
content-security-policy-report-only
base-uri 'self'; connect-src 'self'; default-src 'none'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; frame-src 'self'; img-src 'self' data: https:; media-src 'self'; object-src 'none'; script-src 'self'; style-src 'self'; upgrade-insecure-requests; report-uri https://unvarnished.com/?ACT=124

Links to (50)

Linked from (1)