duka254.com

.com crawl

First seen 2026-05-09 · Last seen 2026-05-18 · ok HTTP/1.1 200 4490 ms crawled 2026-05-16

US · 199.250.201.12 · AS54641 InMotion Hosting, Inc.

Reputation 87/100 weak security headers no dmarc policy

sector ecommerce type homepage

HTML metadata

Title: Duka254
Description: Default Description
Language: en

Technology

Server: Apache
CMS: Gatsby

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×5
s7.addthis.com×1

Social

Contact

Address: © Duka254. 2021. All Rights Reserved

Registration

Registrar

GoDaddy.com, LLC

Created

2019-11-18

Expires

2027-11-18 548 days left

Updated

2025-11-04

Name servers

ns25.domaincontrol.com
ns26.domaincontrol.com

DNS records live

NS

ns25.domaincontrol.com
ns26.domaincontrol.com

MX

0 mail.duka254.com

TXT

NETORGFT5878020.onmicrosoft.com

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

not published

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64vYwIJRgG/tB5+M1hBqFnK8OTUtDTyRce8/hlP0YU6cnfPD2EgoFUjDCoruFs0DN63jCyMyguvCvn…

selectors probed

Certificate (current)

R12

from 2026-03-16 to 2026-06-14

Expires in 26 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.duka254.com/

present

content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy-report-only: font-src *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.ravepay.co *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/re