billieeilish.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-17 · ok HTTP/1.1 200 1368 ms crawled 2026-05-08

US · 192.230.66.85 · AS19551 Incapsula Inc

Reputation 100/100

Classifying

HTML metadata

Title: Billie Eilish | Store - Billie Eilish | Store
Description: Shop exclusive music and merch from the Official Billie Eilish Store. Vinyl, hoodies, tees, accessories, and more.
Language: en
Canonical: https://store.billieeilish.com/

Open Graph

url: https://store.billieeilish.com/
title: Billie Eilish | Store - Billie Eilish | Store
site name: Billie Eilish | Store
description: Shop exclusive music and merch from the Official Billie Eilish Store. Vinyl, hoodies, tees, accessories, and more.

Technology

CDN: Cloudflare
CMS: Shopify

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (6)

shop.app×2
fonts.umgapps.com×1
monorail-edge.shopifysvc.com×1
use.typekit.net×1
vice-prod.sdiapi.com×1
www.googletagmanager.com×1

Social

Contact

Phone

866-682-4413

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2016-01-16

Expires

2027-01-16 241 days left

Updated

2026-01-12

Name servers

ns81.music-name-servers.com
ns82.music-name-servers.com
ns83.music-name-servers.com
ns84.music-name-servers.com

DNS records live

NS

ns-1438.awsdns-51.org
ns-1541.awsdns-00.co.uk
ns-351.awsdns-43.com
ns-815.awsdns-37.net

TXT

google-site-verification=7eu2G_DN_BdU_-D3JXTif5CbMBDnTV2CvpMigiZv-so
mmcwxkzqjq6n9bthzlns71qmp654ttp3
crowdcat-prod-player.azurewebsites.net

Email authentication no MX

SPF: not published
DMARC: v=DMARC1; p=Reject; pct=100; rua=mailto:lcdtinfu@ag.us.dmarcian.com; ruf=mailto:lcdtinfu@fr.us.dmarcian.com; fo=1
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-04-07 to 2026-10-23

Expires in 156 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://store.billieeilish.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

short HSTS max-age
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests;
strict-transport-security: max-age=7889238