evastoys.eu

.eu crawl

First seen 2026-05-06 · Last seen 2026-05-18 · ok HTTP/1.1 200 5172 ms crawled 2026-05-13

DE · 145.223.103.78 · AS47583 Hostinger International Limited

Reputation 100/100

Classifying

HTML metadata

Title: Eva's Toys EU - Sex Shop and Adult Toys
Description: Eva's Toys is the best online adult shop in the World. Sex Toys, vibrators, dildos, cock rings, BDSM, and more adult toys are in stock for Immediate dispatch. Discreet shipping on all orders from evastoys.eu.
Language: en
Canonical: https://www.evastoys.eu/

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Font Awesome
Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×1
fonts.gstatic.com×1
use.fontawesome.com×1
www.googletagmanager.com×1

Social

Contact

Address: ©Eva's Toys| All models are over the age of 18

DNS records live

NS

emma.ns.cloudflare.com
pete.ns.cloudflare.com

MX

10 mail.evastoys.eu

Email authentication strong

SPF: v=spf1 a mx include:sendgrid.net include:dnsexit.com ~all
softfail (~all)
DMARC: v=DMARC1; p=quarantine; pct=5; rua=mailto:dmarc-reports@evastoys.eu
policy: quarantine · pct=5
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-02-13 to 2026-05-14

Expired 6 days ago

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.evastoys.eu/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing Content Security Policy
weak frame protection
weak content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
strict-transport-security: max-age=15768000;includeSubdomains; preload
content-security-policy-report-only: font-src https://jsappcdn.hikeorders.com *.cloudflare.com *.typekit.net *.trustedshops.com *.fontawesome.com fonts.gstatic.com https://fonts.bunny.net *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.vivapayments.com https://seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardina