zenhodl.net

HTML metadata

Title: ZenHodl — Sports Prediction API. 11 Sports. Calibrated ML.
Description: Real-time ML win probabilities for 11 sports. Live edge signals across Polymarket, DraftKings, FanDuel. 7-day free trial. Every trade on-chain.
Language: en
Canonical: https://zenhodl.net/

Open Graph

url: https://zenhodl.net/
title: ZenHodl — Sports Prediction API
site name: ZenHodl
description: Real-time ML win probabilities for 11 sports. Calibrated so when we say 70%, teams win 70% of the time. 7-day free trial.

Technology

CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Registration

Registrar

Cloudflare, Inc.

Created

2024-03-21

Expires

2027-03-21 306 days left

Updated

2026-02-24

Name servers

jasper.ns.cloudflare.com
tia.ns.cloudflare.com

DNS records live

NS

jasper.ns.cloudflare.com
tia.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=AHdMvuO5DIZUIgJ3-k2tLfvqrojjeSxcXWyUt1dl9zY
google-site-verification=o-w_9bMdosqVAKEWAmwJ8XbV20nBYap4wIYe0TagqrU

Email authentication strong

SPF

v=spf1 include:_spf.google.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:c1d80d36ea9246258b2edc0294b54966@dmarc-reports.cloudflare.net;

policy: reject (enforced) · sp=reject

DKIM

Show 12 DKIM selectors

default: v=DKIM1; p=
google: v=DKIM1; p=
selector1: v=DKIM1; p=
selector2: v=DKIM1; p=
k1: v=DKIM1; p=
k2: v=DKIM1; p=
mail: v=DKIM1; p=
dkim: v=DKIM1; p=
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvRM9S7MUZc+D0s75OkIvktWDvEB4B9OR4sFeNSCoRa7JGqXbscCkxn9GMSnzvq6gi19P3G6UCvT01etLT…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPqZ9LzKePWz1jH5P7N/q/wNb2pjAiCFFZHfATsoW8HEgibjv3q8OSwYdCq6xermYBMkM6Pz5mYdcDhKVm…
mxvault: v=DKIM1; p=
smtpapi: v=DKIM1; p=

selectors probed

Certificate (current)

E7

from 2026-04-19 to 2026-07-18

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://zenhodl.net/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=(), payment=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://js.stripe.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://q.stripe.com; font-src 'self'; connect-src 'self' wss://zenhodl.net https://zenhodl.net wss://api.zenhodl.net https://api.zenhodl.net https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://api.stripe.com https://r.stripe.com https://js.stripe.com https://nowpayments.io https://pay.nowpayments.io https://commerce.coinbase.com https://buy.coinbase.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form
strict-transport-security: max-age=31536000; includeSubDomains

Links to (3)

Linked from (1)

quebrachomn.com×1