indexo.dev

elfbar.co.uk

.uk crawl

First seen 2026-06-04 · Last seen 2026-06-04 · ok HTTP/1.1 200 1487 ms crawled 2026-06-04

IN · 52.66.101.246 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
ELFBAR UK - Official Elf Bar Online Vape Store
Description
ElfBar's official online store for the best disposable vapes, vape kits and vape pod kits. Genuine ElfBar products online. Free UK delivery over £20.
Language
en
Canonical
https://www.elfbar.co.uk/

Open Graph

url
https://www.elfbar.co.uk
title
ELFBAR UK - Official Elf Bar Online Vape Store
site name
ElfBar UK
description
ElfBar's official online store for the best disposable vapes, vape kits and vape pod kits. Genuine ElfBar products online. Free UK delivery over £20.

Technology

CMS
Gatsby
Analytics
  • Google Tag Manager

Third-party hosts loaded (2)

  • cdn.ometria.com×1
  • www.googletagmanager.com×1

Social

Contact

Address
Global Way, BB3 0RW, Darwen, Lancashire, GB

DNS records live

NS
  • ns1.sonassi.com
  • ns2.sonassi.com
  • ns3.sonassi.com
MX
  • 1 elfbar-co-uk.mail.protection.outlook.com
TXT
  • mandrill_verify.n1TSASxjBEMqiiaJ1y33pw
  • MS=ms88329164.
Verified for
  • Google

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net +a ip4:149.86.101.16/29 +ip4:83.222.240.204 ip4:185.147.132.24/29 -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:jiulrblf@ag.eu.dmarcian.com;
policy: reject (enforced)
DKIM
  • default: v=DKIM1; h=sha256; k=rsa; s=email; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrs4DEjiOY2NTYv8GWpLtGqu4PeFS2bVuLHQZ2D+gMnjssQRA8t/kHikoT9…
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+JCGgYxAUs0V84TvxxnF2aQcAnC44kJqrlcmNhTKu2CtcrqHvHekIjDkb/icr5LRtTbRFK5mx8gnt…
selectors probed

Certificate (current)

R12
from 2026-05-11 to 2026-08-09
Expires in 65 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.elfbar.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • short HSTS max-age
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
font-src 'self' fonts.gstatic.com fonts.googleapis.com *.hotjar.com *.zopim.com *.fontawesome.com data: static.lipscore.com www.vampirevape.co.uk www.dotvape.co.uk www.totalvapour.co.uk www.premiervaping.com www.flavourwarehouse.co.uk www.elfbar.co.uk www.lostmary.co.uk www.skecrystalbar.com 'unsafe-inline'; form-action 'self' pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.paypal.com www.elfbar.co.uk www.lostmary.co.uk api.ometria.com www.dotvape.co.uk www.totalvapour.co.uk www.premiervaping.com www.flavourwarehouse.co.uk www.skecrystalbar.com 'unsafe-inline' * *.ometria.com www.ometria.com; frame-ancestors 'self' www.vampirevape.co.uk www.dotvape.co.uk www.totalvapour.co.uk www.premiervaping.com www.flavourwarehouse.co.uk www.elfbar.co.uk www.lostmary.co.uk www.skecrystalbar.com; frame-src 'self' *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com
strict-transport-security
max-age=0

Links to (5)

Linked from (1)