indexo.dev

withcabin.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1216 ms crawled 2026-05-18

IE · 46.137.93.195 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Cabin | Privacy-first, Google Analytics alternative
Description
No cookies, no consent banners, no ad networks, 100% GDPR & CCPA compliant, low footprint web analytics. The best alternative to Google Analytics.
Language
en
Canonical
https://withcabin.com/

Open Graph

url
https://withcabin.com/
title
Cabin | Privacy-first, Google Analytics alternative
locale
en_GB
description
No cookies, no consent banners, no ad networks, 100% GDPR & CCPA compliant, low footprint web analytics. The best alternative to Google Analytics.

Technology

CMS
Nuxt

Contact

Address
st web analyticsIndependently made and hosted in the EU 🇪🇺© 2020

Registration

Registrar
Amazon Registrar, Inc.
Created
2019-12-03
Expires
2026-12-03 197 days left
Updated
2026-05-14
Name servers
  • ns-1170.awsdns-18.org
  • ns-1809.awsdns-34.co.uk
  • ns-3.awsdns-00.com
  • ns-681.awsdns-21.net

DNS records live

NS
  • ns-1170.awsdns-18.org
  • ns-1809.awsdns-34.co.uk
  • ns-3.awsdns-00.com
  • ns-681.awsdns-21.net
MX
  • 10 inbound-smtp.eu-west-1.amazonaws.com
TXT
  • google-site-verification=noPZcqXSY2zboR0YsyM8ML48yp86tMd6vdeWrkdEp28

Email authentication weak

SPF
not published
DMARC
v=DMARC1; p=none; pct=100; rua=mailto:postmaster@withcabin.com;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

Amazon RSA 2048 M01
from 2025-10-31 to 2026-11-29
Expires in 193 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://withcabin.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • cross-origin-opener-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
no-referrer
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://scripts.withcabin.com https://ping.withcabin.com https://cdn.withcabin.com http://mulhoon.local https://*.stripe.com;connect-src 'self' https://*.withcabin.com http://mulhoon.local;img-src 'self' data: https: blob:;style-src 'self' 'unsafe-inline';frame-src 'self' https://*.stripe.com;base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests
strict-transport-security
max-age=31536000; includeSubDomains
cross-origin-opener-policy
same-origin
cross-origin-resource-policy
same-origin

Linked from (4)