valebasemetals.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-17 · ok HTTP/1.1 200 690 ms crawled 2026-05-06

US · 104.26.5.19 · AS13335 Cloudflare, Inc.

Reputation 92/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title

Vale Base Metals– Vale Base Metals is transforming our business to provide a secure and responsible supply of the critical minerals that power the future.

Description

– Vale Base Metals is transforming our business to provide a secure and responsible supply of the critical minerals that power the future.

Language

en-CA

Canonical

https://valebasemetals.com/

Translations

Open Graph

url: https://valebasemetals.com/
title: Home - Vale Base Metals
locale: en_US
site name: Vale Base Metals
locale:alternate: pt_BR

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (3)

cdnjs.cloudflare.com×1
static.cloudflareinsights.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Key-Systems GmbH

Created

2023-08-24

Expires

2029-08-24 1193 days left

Updated

2025-11-29

Name servers

kehlani.ns.cloudflare.com
tate.ns.cloudflare.com

DNS records live

NS

kehlani.ns.cloudflare.com
tate.ns.cloudflare.com

MX

0 _dc-mx.1b399d473859.valebasemetals.com

TXT

MS=ms92469125

Email authentication strong

SPF: v=spf1 +a +mx +ip4:137.131.130.23 -all
strict (-all)
DMARC: v=DMARC1; p=none
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-03-26 to 2026-06-24

Expires in 36 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://valebasemetals.com/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' valebasemetals.com *.valebasemetals.com blob: data:; style-src 'self' 'unsafe-inline' 'unsafe-eval' valebasemetals.com *.valebasemetals.com https://unpkg.com/ https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' valebasemetals.com *.valebasemetals.com unpkg.com https://www.googletagmanager.com https://static.cloudflareinsights.com; font-src 'self' https://cdnjs.cloudflare.com data: ; connect-src 'self' https://unpkg.com https://analytics.google.com https://yoast.com https://stats.g.doubleclick.net; img-src 'self' https://services.arcgisonline.com https://server.arcgisonline.com https://www.googletagmanager.com https://www.google.com.br https://secure.gravatar.com https://s.w.org https://ps.w.org/ data: blob: ; worker-src 'self' blob:; frame-src https://www.youtube.com/ https://valebasemetals.com;