diffordsguide.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-15 · ok HTTP/1.1 200 1286 ms crawled 2026-05-06

GB · 18.135.138.83 · AS16509 Amazon.com, Inc.

Reputation 97/100 dmarc monitor-only

Classifying

HTML metadata

Title: Difford's Guide - the home of discerning drinkers
Description: Difford's Guide is the world’s best and biggest guide to cocktails, spirits and liqueurs
Language: en

Open Graph

url: https://www.diffordsguide.com/
title: Difford's Guide - the home of discerning drinkers
description: Difford's Guide is the world’s best and biggest guide to cocktails, spirits and liqueurs

Technology

Server: nginx

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)

Third-party hosts loaded (4)

cdn.diffords.com×5
c.pubguru.net×1
securepubads.g.doubleclick.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

Gandi SAS

Created

2004-04-12

Expires

2031-04-12 1789 days left

Updated

2025-09-16

Name servers

ns-1431.awsdns-50.org
ns-1784.awsdns-31.co.uk
ns-58.awsdns-07.com
ns-798.awsdns-35.net

DNS records live

NS

ns-1431.awsdns-50.org
ns-1784.awsdns-31.co.uk
ns-58.awsdns-07.com
ns-798.awsdns-35.net

MX

10 mail.protonmail.ch
20 mailsec.protonmail.ch

TXT

protonmail-verification=65368708759ce42f4296a730eea51ad1765bde39

Email authentication strong

SPF

v=spf1 include:_spf.protonmail.ch include:spf.mtasv.net include:amazonses.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

mail: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt37N1lPu+uI/bhaOHEy/dh2P1GrilHKFdpLcmYcsVy4yGb8rnLTf4EFMUl/NfvB6j4N…
dkim: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCd3OeWtix9KSy0zZG73TQUU75rEicE8aAkhMqSaimghdcL+rIcukrB2Ip0ijmho1RKymXkgIBiqa9JrD3zD9rmhx7Zi…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-06-19 to 2026-07-19

Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.diffordsguide.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY, SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; media-src 'self' https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'self' https://maps.google.co.uk https://maps.googleapis.com https://maps.google.com
strict-transport-security: max-age=63072000; includeSubDomains