curl.se
At a glance
- Category
- Development
- Language
- English
- Paid-content signal
- No paid content foundObserved
- Registered
- 2020
- Hosting
- FastlyInferred
- HTTPS certificate trusted
- PassedObserved
- Last updated
Related questions
More questions →What is curl.se?
Does curl.se offer paid content?
What languages does curl.se support?
How can I visit curl.se?
What are some alternatives to curl.se?
Website Overview
Identifiable technologies and additional version or configuration signals make the service easier to fingerprint, which may help targeted scanners narrow their checks. Several search or sharing settings need attention. Together they may make snippets, preview images or preferred URLs less consistent across platforms.
Domain and Registration
The domain has about 5 years of registration history; its current configuration provides more context than age alone. The domain uses the common .se extension, which is not an independent safety signal.
DNS and Email
The observed email authentication setup is incomplete: DMARC is missing. The lowest TTL is 15 seconds, supporting rapid record changes at the cost of more frequent lookups. Nameservers are provided by amplitut.de, indicating managed DNS hosting. MX records point to the haxx.se email service. No CNAME was found; the observed records resolve directly to addresses.
TLS and Certificates
The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.
HTTP and Browser Security
The Server header exposes the software version: nginx/1.31.3. This makes version-targeted checks easier, but is not proof of an exploitable vulnerability. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. All six checked browser-security headers are present. Their effectiveness still depends on the policy values and application behavior. The x-cache, x-served-by, via response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers.
Technology Stack Analysis
The public page identifies Fastly, nginx 1.31.3, with exact versions exposed for 1 technologies. These details can narrow vulnerability checks, although exposure alone is not a vulnerability.
Search and Social Sharing
No homepage meta description was detected, leaving snippet selection more dependent on page text. No homepage canonical URL was detected. If duplicate URLs exist, consolidation may be less explicit. No Open Graph metadata was detected, so social previews may depend on platform inference. The title has 4 characters, within a common display range. The observed directives allow indexing and link following.
Hosting and Email
Registration details
| Registrar | Oderland |
|---|---|
| Registered | 2020-10-19 |
| Expires | Unknown |
| Domain status | ok |
| Nameservers | ns.amplitut.de、ns1.haxx.se、nx1.named.se、nx2.named.se、nx3.named.se |
| DNSSEC | unsigned |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | curl.se | 151.101.1.91 | 3569 | — |
| A | curl.se | 151.101.129.91 | 3569 | — |
| A | curl.se | 151.101.193.91 | 3569 | — |
| A | curl.se | 151.101.65.91 | 3569 | — |
| AAAA | curl.se | 2a04:4e42:200::347 | 15 | — |
| AAAA | curl.se | 2a04:4e42:400::347 | 15 | — |
| AAAA | curl.se | 2a04:4e42:600::347 | 15 | — |
| AAAA | curl.se | 2a04:4e42:800::347 | 15 | — |
| AAAA | curl.se | 2a04:4e42::347 | 15 | — |
| AAAA | curl.se | 2a04:4e42:a00::347 | 15 | — |
| AAAA | curl.se | 2a04:4e42:c00::347 | 15 | — |
| AAAA | curl.se | 2a04:4e42:e00::347 | 15 | — |
| MX | curl.se | mail.haxx.se | 3600 | 10 |
| NS | curl.se | ns.amplitut.de | 3600 | — |
| NS | curl.se | ns1.haxx.se | 3600 | — |
| NS | curl.se | nx1.named.se | 3600 | — |
| NS | curl.se | nx2.named.se | 3600 | — |
| NS | curl.se | nx3.named.se | 3600 | — |
| TXT | curl.se | fastly-domain-delegation-lk4328dd00dsaa-305976-20201102 | 3600 | — |
| TXT | curl.se | v=spf1 -all | 3600 | — |
TLS and certificates
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html |
| cache-control | max-age=60 |
| server | nginx/1.31.3 |
| strict-transport-security | max-age=31536000 |
| content-security-policy | upgrade-insecure-requests; default-src 'none'; base-uri 'none'; img-src 'self'; style-src 'unsafe-inline' 'self'; form-action 'self'; frame-ancestors 'none'; require-trusted-types-for 'script'; |
| x-frame-options | deny |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin |
| permissions-policy | accelerometer=(), ambient-light-sensor=(), aria-notify=(), autoplay=(), bluetooth=(), camera=(), captured-surface-control=(), ch-ua-high-entropy-values=(), compute-pressure=(), cross-origin-isolated=(), deferred-fetch=(), deferred-fetch-minimal=(), display-capture=(), encrypted-media=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), language-detector=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), on-device-speech-recognition=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), private-state-token-redemption=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), summarizer=(), translator=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=() |
Identified technologies
Pages, Search and Sharing
| Meta description | Not detected |
|---|---|
| Canonical URL | Not detected |
| Language | English (default) |
| Twitter Card | Not detected |
Unknown
robots.txt (opens in a new tab)
1 rulesAll bots 0 allowed · 1 disallowed
- Disallow
/dev/log.cgi
No matching rules.
Sitemaps
0No sitemaps found
Recent Updates
- HTTP Response Information
- Website profile
User reviews (0)