assay.am is an active domain registered on 2026-06-07, through abcdomain (ABCDomain LLC) and currently registered to Domain Privacy.
At the time of the latest scan, the website was served through Facebook, Inc. from SE and used an unknown server as its web infrastructure.
Our OSINT analysis identified 4 ownership and infrastructure relationships associated with this domain. These include matches based on the google analytics, same ip address identifiers. Such correlations may indicate common ownership, shared administration, or related web properties.
The current infrastructure shares its public IP address with 15 additional domains. A security assessment found that the website currently exposes 5 of the six commonly recommended HTTP security headers, resulting in a baseline security rating of A+.Historical data for this domain is currently limited. One infrastructure snapshot is available, allowing future changes to hosting, technologies, response headers, page size, and performance to be tracked over time as additional observations are collected.
This report combines monitoring and OSINT correlation data to provide a comprehensive technical profile of the domain.
Registrar
abcdomain (ABCDomain LLC)
Registrant
Domain Privacy
Created
2026-06-07
Expires
2027-06-07 · in 302d
Name servers
brodie.ns.cloudflare.com, lina.ns.cloudflare.com
Last checked
2026-07-03 21:04:25 UTC
Security headers
A+
Baseline security check
5 of 6 recommended headers present
✓
Strict-Transport-Security
max-age=31536000; preload; includeSubDomains
✓
X-Content-Type-Options
nosniff
✓
X-Frame-Options
DENY
✓
Content-Security-Policy
default-src *.facebook.com *.fbcdn.net *.instagram.com blob: 'wasm-unsafe-eval';script-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-mnptgZB8' blob: 'self' 'wasm-unsafe-eval' https://*.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com https://accounts.google.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* blob: *.cdninstagram.com wss://*.instagram.com:* 'self' https://accounts.google.com https://meta.privacy-gateway.cloudflare.com/relay;font-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://fonts.gstatic.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: *.fbsbx.com android-webview-video-poster: *.oculuscdn.com *.giphy.com *.tenor.co *.tenor.com www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk https://www.gstatic.com https://*.google-analytics.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com *.fbsbx.com data: blob: https://*.giphy.com *.tenor.co *.tenor.com;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data: www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;
✓
Permissions-Policy
accelerometer=(self), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(self), gyroscope=(self), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(self), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self "https://*.facebook.com" "https://facebook.com"), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
Cross-references
Snapshot history · 1 total
2026-07-03 21:03:32 UTC
latest
Server IP
31.13.72.174
Location
SE, Stockholm
Network / ISP
AS32934 Facebook, Inc. · Facebook, Inc.
Page Size
475.46 KB
Load Time
593 ms
(TTFB: 229 ms)
HTTPS
yes
MX Records
assay-am.mail.protection.outlook.com (prio: 0)
Email Security
SPF DMARC
Analytics & Trackers
Googleanalytics
Response Headers
Date: Fri, 03 Jul 2026 21:04:25 GMT
Vary: Accept-Encoding
Pragma: no-cache
:status: 200
Alt-Svc: h3=":443"; ma=86400
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-Stack: www
Accept-Ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
Report-To: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.instagram.com\/error\/ig_web_error_reports\/?device_level=unknown&brsid=7658410577856282589&comet_app_key=7&cpp=C3&cv=1042615712&st=1783112665001"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.instagram.com\/error\/ig_web_error_reports\/"}],"group":"permissions_policy"}
Set-Cookie: Array
X-Fb-Debug: m2KEbUL5aQ4pLuWtU4P2TCq3+H3tjswwnbMSIt0NegydeExB3V4+aE0EoFhrNGEnys3nZwaZXWTkTD1RGFSUvQ==
Content-Type: text/html; charset="utf-8"
Origin-Trial: ArDvqjFKr1fHThlSM8Kkp74sxlOCFTeqYJMXCGqCG/VJmcYlO/0UavmpqPDit2KppDf1THInNpwA36GmtgPOug8AAAB2eyJvcmlnaW4iOiJodHRwczovL3d3dy5pbnN0YWdyYW0uY29tOjQ0MyIsImZlYXR1cmUiOiJDcmFzaFJlcG9ydGluZ1N0b3JhZ2VBUEkiLCJleHBpcnkiOjE3NzY3Mjk2MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==
Cache-Control: private, no-cache, no-store, must-revalidate
Document-Policy: force-load-at-top, include-js-call-stacks-in-crash-reports
X-Frame-Options: DENY
X-Xss-Protection: 0
Accept-Ch-Lifetime: 4838400
Permissions-Policy: accelerometer=(self), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(self), gyroscope=(self), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(self), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self "https://*.facebook.com" "https://facebook.com"), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
Reporting-Endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.instagram.com/error/ig_web_error_reports/?device_level=unknown&brsid=7658410577856282589&comet_app_key=7&cpp=C3&cv=1042615712&st=1783112665001", permissions_policy="https://www.instagram.com/error/ig_web_error_reports/"
Origin-Agent-Cluster: ?1
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src *.facebook.com *.fbcdn.net *.instagram.com blob: 'wasm-unsafe-eval';script-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-mnptgZB8' blob: 'self' 'wasm-unsafe-eval' https://*.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com https://accounts.google.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* blob: *.cdninstagram.com wss://*.instagram.com:* 'self' https://accounts.google.com https://meta.privacy-gateway.cloudflare.com/relay;font-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://fonts.gstatic.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: *.fbsbx.com android-webview-video-poster: *.oculuscdn.com *.giphy.com *.tenor.co *.tenor.com www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk https://www.gstatic.com https://*.google-analytics.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com *.fbsbx.com data: blob: https://*.giphy.com *.tenor.co *.tenor.com;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data: www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;
X-Fb-Connection-Quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=19, mss=1380, tbw=4619, tp=-1, tpl=-1, uplat=227, ullat=0
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Cross-Origin-Opener-Policy: unsafe-none;report-to="coop_report"
Cross-Origin-Resource-Policy: same-origin
Cross-Origin-Embedder-Policy-Report-Only: require-corp;report-to="coep_report"
Vary: Accept-Encoding
Pragma: no-cache
:status: 200
Alt-Svc: h3=":443"; ma=86400
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-Stack: www
Accept-Ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
Report-To: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.instagram.com\/error\/ig_web_error_reports\/?device_level=unknown&brsid=7658410577856282589&comet_app_key=7&cpp=C3&cv=1042615712&st=1783112665001"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.instagram.com\/error\/ig_web_error_reports\/"}],"group":"permissions_policy"}
Set-Cookie: Array
X-Fb-Debug: m2KEbUL5aQ4pLuWtU4P2TCq3+H3tjswwnbMSIt0NegydeExB3V4+aE0EoFhrNGEnys3nZwaZXWTkTD1RGFSUvQ==
Content-Type: text/html; charset="utf-8"
Origin-Trial: ArDvqjFKr1fHThlSM8Kkp74sxlOCFTeqYJMXCGqCG/VJmcYlO/0UavmpqPDit2KppDf1THInNpwA36GmtgPOug8AAAB2eyJvcmlnaW4iOiJodHRwczovL3d3dy5pbnN0YWdyYW0uY29tOjQ0MyIsImZlYXR1cmUiOiJDcmFzaFJlcG9ydGluZ1N0b3JhZ2VBUEkiLCJleHBpcnkiOjE3NzY3Mjk2MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==
Cache-Control: private, no-cache, no-store, must-revalidate
Document-Policy: force-load-at-top, include-js-call-stacks-in-crash-reports
X-Frame-Options: DENY
X-Xss-Protection: 0
Accept-Ch-Lifetime: 4838400
Permissions-Policy: accelerometer=(self), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(self), gyroscope=(self), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(self), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self "https://*.facebook.com" "https://facebook.com"), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
Reporting-Endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.instagram.com/error/ig_web_error_reports/?device_level=unknown&brsid=7658410577856282589&comet_app_key=7&cpp=C3&cv=1042615712&st=1783112665001", permissions_policy="https://www.instagram.com/error/ig_web_error_reports/"
Origin-Agent-Cluster: ?1
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src *.facebook.com *.fbcdn.net *.instagram.com blob: 'wasm-unsafe-eval';script-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-mnptgZB8' blob: 'self' 'wasm-unsafe-eval' https://*.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com https://accounts.google.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* blob: *.cdninstagram.com wss://*.instagram.com:* 'self' https://accounts.google.com https://meta.privacy-gateway.cloudflare.com/relay;font-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://fonts.gstatic.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: *.fbsbx.com android-webview-video-poster: *.oculuscdn.com *.giphy.com *.tenor.co *.tenor.com www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk https://www.gstatic.com https://*.google-analytics.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com *.fbsbx.com data: blob: https://*.giphy.com *.tenor.co *.tenor.com;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data: www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;
X-Fb-Connection-Quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=19, mss=1380, tbw=4619, tp=-1, tpl=-1, uplat=227, ullat=0
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Cross-Origin-Opener-Policy: unsafe-none;report-to="coop_report"
Cross-Origin-Resource-Policy: same-origin
Cross-Origin-Embedder-Policy-Report-Only: require-corp;report-to="coep_report"