yodayo.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (6)
- fonts.googleapis.com×2
- fly.storage.tigris.dev×1
- fonts.gstatic.com×1
- frontend-images.moescape.ai×1
- storage.googleapis.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- Squarespace Domains II LLC
- Created
- 2022-09-30
- Expires
- 2026-09-30 134 days left
- Updated
- 2025-09-15
- Name servers
-
- newt.ns.cloudflare.com
- yolanda.ns.cloudflare.com
DNS records live
- NS
-
- newt.ns.cloudflare.com
- yolanda.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
google-site-verification=eT1gGfCNRJMfp9pyVA_F40Pl3m7J5wivvyjZRpuznsspaddle-verification=5157bab4facebook-domain-verification=0rveh589k6gzay82721fzjt3yj1ti5
Email authentication strong
- SPF
-
v=spf1 include:_spf.google.com include:sendgrid.net ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=quarantine;rua=mailto:info@yodayo.compolicy: quarantine - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwmrfLaT0Y+3+AgNgEynJJsK5dHsg/hm2Jfn4R/nUZLZjfJw3ERc2oAHoRmQSefxBIHdCZUjyJE+f/… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzus/c9kRzecmIb63zIZsrq/42kpa79VVD9sIb4NRSLtLV3qwBNJxAytmWgRBk14iGdZr67eJ2UHM5osNZ0… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7IocajezYz/QCjddvPYq2oerUiSqWzJxcREkYVChnBAvzSR+mLpqNiQt8hRxUhQ41FvGcCeEosGcB5HiY…
selectors probed - google:
Certificate (current)
WE1
Expires in 24 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
DENY- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' blob: *.facebook.net *.redditstatic.com *.reddit.com static.ads-twitter.com www.youtube.com www.googletagmanager.com accounts.google.com googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com accounts.google.com; img-src 'self' blob: data: *.yodayo.com *.cloudflarestorage.com www.googletagmanager.com www.facebook.com *.youtube.com *.redditstatic.com *.reddit.com *.twitter.com t.co storage.googleapis.com fly.storage.tigris.dev *.yodayo.com *.moescape.ai *.wallhere.com *.amazonaws.com false; font-src 'self' fonts.gstatic.com; object-src 'none'; media-src 'self' blob: storage.googleapis.com fly.storage.tigris.dev *.yodayo.com *.moescape.ai *.cloudflarestorage.com false; connect-src blob: * ; frame-src 'self' checkout-sdk.onerway.com accounts.google.com www.youtube.com www.googletagmanager.com www.facebook.com *.soundcloud.com; base-uri 'self'; form-action 'self' www.facebook.com; frame-ancestors 'none'; bloc
Links to (3)
- moescape.ai×2
- youtube.com×2
- reddit.com×2