indexo.dev

espressobueno.com

.com crawl

First seen 2026-04-16 · Last seen 2026-05-08 · ok HTTP/1.1 200 3206 ms crawled 2026-05-11

US · 67.18.65.7 · AS36351 IBM Cloud

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Espresso & Coffee Shop | Espresso Bueno | Barre, Vermont
Description
Espresso Bueno is an independent coffee shop featuring specialty coffee roasters from around the region. We have been brewing strong in Barre VT, since July 2007.

Technology

Server
nginx
Analytics
  • Google Tag Manager

Third-party hosts loaded (4)

  • www.googletagmanager.com×2
  • ajax.googleapis.com×1
  • netdna.bootstrapcdn.com×1
  • www.facebook.com×1

Social

Contact

Phone

Registration

Registrar
Wild West Domains, LLC
Created
2010-01-15
Expires
2027-01-15 241 days left
Updated
2026-01-16
Name servers
  • ns1.modx.cloud
  • ns2.modx.cloud
  • ns3.modx.cloud
  • ns4.modx.cloud
  • ns5.modx.cloud

DNS records live

NS
  • ns1.modx.cloud
  • ns2.modx.cloud
  • ns3.modx.cloud
  • ns4.modx.cloud
  • ns5.modx.cloud
MX
Show 7 MX records
  • 1 aspmx.l.google.com
  • 10 aspmx2.googlemail.com
  • 10 aspmx3.googlemail.com
  • 10 aspmx4.googlemail.com
  • 10 aspmx5.googlemail.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com

Email authentication weak

SPF
v=spf1 a mx include:aspmx.googlemail.com ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-04-11 to 2026-07-10
Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://espressobueno.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=()
x-content-type-options
nosniff
content-security-policy
default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: blob: 'unsafe-inline'; font-src * data:
strict-transport-security
max-age=31536000; includeSubdomains, max-age=31536000; includeSubdomains

Links to (3)

Linked from (1)