ebay.es
HTML metadata
Technology
- CDN
- Akamai
- Server
- ebay-proxy-server
Third-party hosts loaded (30)
- i.ebayimg.com×39
- ir.ebaystatic.com×17
- www.ebay.com×3
- ar.ebay.com×1
- bo.ebay.com×1
- br.ebay.com×1
- by.ebay.com×1
- cl.ebay.com×1
- cn.ebay.com×1
- co.ebay.com×1
- cr.ebay.com×1
- do.ebay.com×1
- ec.ebay.com×1
- gt.ebay.com×1
- hn.ebay.com×1
- il.ebay.com×1
- kz.ebay.com×1
- mx.ebay.com×1
- ni.ebay.com×1
- pa.ebay.com×1
- pe.ebay.com×1
- pr.ebay.com×1
- pt.ebay.com×1
- py.ebay.com×1
- rover.ebay.com×1
- secureir.ebaystatic.com×1
- sv.ebay.com×1
- uy.ebay.com×1
- ve.ebay.com×1
- www.befr.ebay.be×1
Contact
DNS records live
- NS
-
- dns1.p06.nsone.net
- dns2.p06.nsone.net
- dns3.p06.nsone.net
- ns01.ebaydns.com
- ns02.ebaydns.com
- ns03.ebaydns.com
- ns04.ebaydns.com
- MX
-
- 10 mx1.hc2186-24.iphmx.com
- 10 mx2.hc2186-24.iphmx.com
- TXT
-
Show 13 TXT records
_9x1syjn55mozh6ex8vj2ixddxbkrmceadobe-idp-site-verification=25164687e15a57a865a83d05e79e15242cfbfbbcaeeba52d3c370b6ea4b91a7bdtm-domain-verification=JCAe99XUJQZWGRAVgu4CAM2EQPkyasCRigaxEqfc1OQ_zyhymohjbjdnfg6mkc986j56khgtkq8spf2.0/pra mx include:s._sid.ebay.com include:m._sid.ebay.com include:p._sid.ebay.com include:c._sid.ebay.com ~allMS=ms26598364twzqmddjz0zqhwp10qyn9fwh8lbky9wdgoogle-site-verification=446Tr7oW9IID7WVwfkU3Nqp8Qb3BaYdlfyaVl4_nng8pt0rcyzgbrp9q6ycf2b742x8bfzvt872facebook-domain-verification=5nxniwqkr8y98wt7c3mleu60yhx5wbf3zqqffl85bsg0nycdx77p875zdbvf4v8nmsdw42l4mz5kkwj5bfbw13n5h2ryx52ddxq7hm99sr1rhmmvnnsqt8kd88pmkf
Email authentication strong
- SPF
-
v=spf1 mx include:s._spf.ebay.com include:p._spf.ebay.com include:c._spf.ebay.com include:eu.khoros.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:ebay@rua.agari.com; ruf=mailto:ebay@ruf.agari.com; fo=1; rf=afrf; pct=100policy: reject (enforced) - DKIM
-
- dkim:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLM0fpK/rhklYDRJSBQ6bSyZKjQxTeEnZywzodwGAjAste2aOQzXJyZmZrjHZ0JL6Gy/e351n1P0Yo0cVE4n… - smtpapi:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…
selectors probed - dkim:
Certificate (current)
Sectigo Public Server Authentication CA OV R40
Expires in 186 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- findings
-
- missing Content Security Policy
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- strict-transport-security
max-age=31536000- content-security-policy-report-only
style-src 'self' 'unsafe-inline' data: *.ebay.com *.ebay.es *.ebaystatic.com *.ebaystatic.cn *.gstatic.com *.fontawesome.com blob: *.googleapis.com; connect-src 'self' *.ebay.com *.ebay.es *.ebaystatic.com *.ebaystatic.cn data: *.google-analytics.com *.doubleclick.net *.avalon.perfdrive.com *.ebayimg.com *.ucweb.com *.akamaihd.net *.ucads.ucweb.com *.analytics.google.com *.g.doubleclick.net *.googletagmanager.com *.pinterest.com *.snapchat.com *.criteo.com *.facebook.com *.googleapis.com *.googleadservices.com blob: analytics.google.com *.us.shoplive.cloud www.facebook.com *.bing.com www.googletagmanager.com google.com *.google.com *.graphitevault.com *.amplitude.com wss://127.0.0.1:* www.redditstatic.com *.reddit.com *.quantummetric.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://* blob: data:; frame-ancestors 'self' *.ebay.com *.ebay.es *.ebaystatic.com *.ebaystatic.cn; img-src 'self' data: blob: https://*; default-src 'self' blob: data: wss: mediastream: https://*; rep