ethosbistro.com
HTML metadata
Technology
- Server
- nginx
- CMS
- Next.js
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- uploads.bettysuite.com×15
- fonts.googleapis.com×2
- fonts.gstatic.com×1
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2011-12-25
- Expires
- 2026-12-25 217 days left
- Updated
- 2025-12-25
- Name servers
-
- ns65.domaincontrol.com
- ns66.domaincontrol.com
DNS records live
- NS
-
- ns65.domaincontrol.com
- ns66.domaincontrol.com
- MX
-
- 10 aspmx.l.google.com
- 20 alt1.aspmx.l.google.com
- 30 alt2.aspmx.l.google.com
- 40 aspmx2.googlemail.com
- 50 aspmx3.googlemail.com
- TXT
-
dhc8m5pe9t5cjp494jhde8okkd
- Verified for
-
- Apple
Email authentication weak
- SPF
-
v=spf1 a mx include:_spf.elasticemail.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 17 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
worker-src blob:; child-src https://*.stripe.com https://player.vimeo.com https://checkout.sandbox.dev.clover.com https://checkout.clover.com https://calendar.google.com https://www.googletagmanager.com https://td.doubleclick.net https://*.setmore.com https://www.facebook.com https://www.google.com https://www.youtube.com https://www.yelp.com https://js.driftt.com https://cdn.userway.org https://web.squarecdn.com https://connect.squareup.com https://www.opentable.ca https://www.opentable.com https://*.sibforms.com/ blob: gap:; img-src https: blob: data:; default-src * 'self' 'unsafe-inline' 'unsafe-eval' data: gap: content:- strict-transport-security
max-age=31536000; includeSubDomains; preload