wheretoflee.com

HTML metadata

Technology

Server

LiteSpeed

jQuery

1.9.1 known XSS (<3.5)

Ads

• Amazon Ads
• Google AdSense

Fonts

• Google Fonts

Third-party hosts loaded (4)

• ir-na.amazon-adsystem.com×12
• ajax.googleapis.com×2
• fonts.googleapis.com×1
• pagead2.googlesyndication.com×1

Registration

Registrar

NameCheap, Inc.

Created

2012-03-27

Expires

2027-03-27 293 days left

Updated

2026-02-28

Name servers

• ns1.mysecurecloudhost.com
• ns2.mysecurecloudhost.com
• ns3.mysecurecloudhost.com
• ns4.mysecurecloudhost.com

DNS records live

NS

• ns1.mysecurecloudhost.com
• ns2.mysecurecloudhost.com
• ns3.mysecurecloudhost.com
• ns4.mysecurecloudhost.com

MX

• 0 wheretoflee.com

Email authentication partial

SPF

v=spf1 +a +mx +ip4:185.181.252.107 include:spf.mysecurecloudhost.com +ip4:185.181.252.131 ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH0zLG93jR/Z9GodrcP/8aoTcKfhVpF2yw8nDiOpE3wrIbPDcUExK+LtW7r50eL4+g4Bg9PTqwqHa5…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://wheretoflee.com/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (22)

• yahoo.com×1
• usnews.com×1
• travelandleisure.com×1
• thethaiger.com×1
• schengenvisainfo.com×1
• sacred-connection.com×1
• ndtv.com×1
• msn.com×1
• moneycontrol.com×1
• miamiherald.com×1
• inc.com×1
• forbes.com×1
• fastcompany.com×1
• expats.cz×1
• erikweems.com×1
• eeweems.com×1
• comicatomic.com×1
• ceoworld.biz×1
• bmmagazine.co.uk×1
• aol.com×1
• amazon.com×1
• allstarcaresolutions.com×1

Linked from (3)

• comicbookbrain.com×1
• livingcitydc.com×1
• eeweems.com×1