bloominsoap.co.uk

.uk crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 1448 ms crawled 2026-05-20

CA · 23.227.38.65 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Bloom In Soap | Natural Soaps | Unscented Soap
Description
We're a multi award-winning brand handcrafting natural soaps, salt bars, shea body butter, luxury hand cream, conditioning shampoo bars, and a range of fragrance free skin products. Vegan and plastic free.
Language
en
Canonical
https://www.bloominsoap.co.uk/

Open Graph

url
https://www.bloominsoap.co.uk/
title
Bloom In Soap | Natural Soaps | Unscented Soap
site name
Bloom In Soap
description
We're a multi award-winning brand handcrafting natural soaps, salt bars, shea body butter, luxury hand cream, conditioning shampoo bars, and a range of fragrance free skin products. Vegan and plastic free.

Technology

CDN
Cloudflare
CMS
Shopify
Third-party hosts loaded (7)
  • cdn.shopify.com×6
  • shop.app×2
  • api.judge.me×1
  • cdn.judge.me×1
  • cdn1.judge.me×1
  • fonts.shopifycdn.com×1
  • monorail-edge.shopifysvc.com×1

Social

Contact

Phone

DNS records live

NS
  • dns1.registrar-servers.com
  • dns2.registrar-servers.com
MX
  • 10 mx1.privateemail.com
  • 10 mx2.privateemail.com

Email authentication partial

SPF
v=spf1 include:spf.privateemail.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc-hello@bloominsoap.co.uk
policy: none (monitoring only)
DKIM
  • default: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1sj48igr15KjS5AbxO20G80DsO3mkuEyleC1NV3NkI9z6BiEpMVzPdftFkBOPlxrJwoZnHk5v1X4hDT…
selectors probed

Certificate (current)

E8
from 2026-04-06 to 2026-07-05
Expires in 45 days

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bloominsoap.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • short HSTS max-age
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security
max-age=7889238

Links to (3)

Linked from (1)