indexo.dev

utf9k.net

.net crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 639 ms crawled 2026-05-18

FI · 37.27.135.61 · AS24940 Hetzner Online GmbH

Reputation 75/100 listed in spam blocklist

Classifying

HTML metadata

Title
utf9k
Description
You are online and logged on to my personal site
Language
en-us
Generator
Hugo 0.161.1
Canonical
https://utf9k.net/
Feeds

Open Graph

url
https://utf9k.net/
title
Welcome
locale
en_us
site name
utf9k
description
Hey, I’m Marcus. I’m a Software Developer based in Auckland, New Zealand. Welcome to my small patch of soil on the internet.

Technology

Server
BunnyCDN-FI1-1208
CMS
Hugo

Third-party hosts loaded (5)

  • s4.anilist.co×3
  • webmention.io×2
  • github.com×1
  • images.igdb.com×1
  • mastodon.nz×1

Social

Registration

Registrar
Porkbun LLC
Created
2018-06-14
Expires
2027-06-14 390 days left
Updated
2026-04-30
Name servers
  • dee.ns.cloudflare.com
  • stan.ns.cloudflare.com

DNS records live

NS
  • dee.ns.cloudflare.com
  • stan.ns.cloudflare.com
MX
  • 10 in1-smtp.messagingengine.com
  • 20 in2-smtp.messagingengine.com
TXT
Show 4 TXT records
  • google-site-verification=7XQmc_jmbYCEvj_SYEgLCZj-8XBYcdK2RykDlZH2lns
  • google-site-verification=oU0N55oEkyi5hYWzzQNZwdBmCwDr9Q8np0PJ2ISplH0
  • keybase-site-verification=3Otbmwt5ONpRiIpZVcBQKSKNJGfuA0PFNYFxc5d88XI
  • Poking around? Feel free to email me at dns@utf9k.net

Email authentication strong

SPF
v=spf1 include:spf.messagingengine.com -all
strict (-all)
DMARC
v=DMARC1;p=reject;sp=reject;pct=100;aspf=r;rua=mailto:admin@utf9k.net;ruf=mailto:admin@utf9k.net;
policy: reject (enforced) · sp=reject
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-05-08 to 2026-08-06
Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://utf9k.net/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer
x-frame-options
SAMEORIGIN
permissions-policy
interest-cohort=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; style-src 'self' 'unsafe-inline' https://api.mapbox.com https://cdn.tailwindcss.com https://unpkg.com; img-src data: blob: *; media-src data: *; script-src 'self' https://api.mapbox.com https://unpkg.com; worker-src 'self' blob: ; script-src-elem 'self' 'unsafe-inline' https://unpkg.com https://api.mapbox.com https://platform.twitter.com https://cdn.tailwindcss.com; script-src-attr 'unsafe-inline' ; frame-src 'self' https://*.utf9k.net https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com ; child-src 'self' blob: ; connect-src * ;
strict-transport-security
max-age=31622400; includeSubDomains

Links to (6)

Linked from (1)