bluebunny.com

HTML metadata

Title: Blue Bunny Ice Cream - Sundaes, Cones, Bars - Blue Bunny
Description: Welcome to the official Blue Bunny website! Explore delicious frozen treats in funtastic flavors. You’ll love to bring the fun home to your freezer.
Canonical: https://www.bluebunny.com/

Technology

CDN: Azure Front Door

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (6)

wellscdn.com×61
cdnjs.cloudflare.com×4
fonts.googleapis.com×2
use.typekit.net×2
fonts.gstatic.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

1995-12-02

Expires

2027-02-01 258 days left

Updated

2026-02-01

Name servers

ns1-07.azure-dns.com
ns2-07.azure-dns.net
ns3-07.azure-dns.org
ns4-07.azure-dns.info

DNS records live

NS

ns1-07.azure-dns.com
ns2-07.azure-dns.net
ns3-07.azure-dns.org
ns4-07.azure-dns.info

MX

10 bluebunny-com.mail.protection.outlook.com

TXT

Show 5 TXT records

autodesk-domain-verification=kWJfM3FR0ZKK_L2kzkkW
v=spf1 include:spf.protection.outlook.com include:rp.oracleemaildelivery.com include:ord1.rp.oracleemaildelivery.com include:everbridge.net include:spf.exclaimer.net ip4:68.233.76.14 ip4:204.126.22.10 ip4:216.118.207.81 ip4:104.193.30.164 ip4:204.126.22.123 ~all
adobe-sign-verification=22ccf7c28cbd046e0cc08985a3f0bd0
google-site-verification=6b4EQ3CsiWHKLw5n0OAgNFf92GaL8j2geGBYbaSWLG0
ZOOM_verify_jFI2S9uUN34s4rsjP767AF

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-18 to 2026-08-19

Expires in 92 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.bluebunny.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(self "https://wellscdn.com" "https://destinilocators.com"), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' https://*.google.com https://*.google-analytics.com https://*.applicationinsights.azure.com https://*.googlesyndication.com https://dc.services.visualstudio.com https://*.bazaarvoice.com https://*.bing.com https://www.googleadservices.com https://*.doubleclick.net https://*.moengage.com https://*.facebook.com https://*.snapchat.com https://*.pinterest.com https://*.adsrvr.org https://*.tiktok.com https://google.com https://*.tiktokw.us https://*.googletagmanager.com https://*.nextdoor.com https://js.monitor.azure.com https://wellscdn.com https://maxmind.destinilocators.com https://*.execute-api.us-west-2.amazonaws.com https://geocode.arcgis.com https://*.pinimg.com https://*.g.doubleclick.net https://*.opendns.com; font-src 'self' https://wellscdn.com https://fonts.gstatic.com https://*.typekit.net; frame-src 'self' https://*.google.com https://www.googletagmanager.com https://destinilocators.com https://*.fls.doubleclick.net https://*.doubleclick
strict-transport-security: max-age=31536000