indexo.dev

zenar.io

.io crawl

First seen 2026-04-13 · Last seen 2026-05-18 · ok HTTP/1.1 200 1753 ms crawled 2026-05-07

GB · 3.9.124.117 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Zenario: open source CMS for websites, databases and extranets
Description
The open source CMS for websites, databases and customer portals, Zenario has an intuitive design interface for designers and site authors. Try it here.
Language
en
Generator
Zenario
Canonical
https://zenar.io/

Open Graph

url
https://zenar.io/
title
Zenario: open source CMS for websites, databases and extranets
description
The open source CMS for websites, databases and customer portals, Zenario has an intuitive design interface for designers and site authors. Try it here.

Technology

Server
Apache
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.googleapis.com×2
  • fonts.gstatic.com×1

DNS records live

NS
  • ns-1229.awsdns-25.org
  • ns-1765.awsdns-28.co.uk
  • ns-32.awsdns-04.com
  • ns-551.awsdns-04.net
TXT
  • google-site-verification=b9G91UKMcY96jjclcbmL4Uo8NEQP_iYEXXj_SlJfk3w

Email authentication no MX

SPF
v=spf1 a mx ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E8
from 2026-05-02 to 2026-07-31
Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://zenar.io/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
  • weak content type protection
Header values
referrer-policy
strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN, SAMEORIGIN
permissions-policy
geolocation=(), microphone=(), camera=(), sync-xhr=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), midi=(), payment=()
x-content-type-options
nosniff, nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; img-src 'self' data: *; font-src 'self' data: *; connect-src 'self' *; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://www.recaptcha.net; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'
strict-transport-security
max-age=63072000; preload

Links to (1)

Linked from (5)