herbalessencesla.com
HTML metadata
Technology
- CDN
- Azure Front Door
- CMS
- Next.js
- Analytics
-
- Google Analytics
- Google Tag Manager
- Segment
- Ads
-
- Google Ads (DoubleClick)
- Meta Pixel
- Cookie consent
-
- OneTrust
Third-party hosts loaded (22)
- images.ctfassets.net×5
- cdn.pricespider.com×2
- cdn.wayvia.com×2
- www.google-analytics.com×2
- www.googletagmanager.com×2
- 8630754.fls.doubleclick.net×1
- aa.agkn.com×1
- adservice.google.com×1
- api.lytics.io×1
- c.lytics.io×1
- cdn.cookielaw.org×1
- cdn.segment.com×1
- connect.facebook.net×1
- d.agkn.com×1
- insight.adsrvr.org×1
- js.adsrvr.org×1
- js.agkn.com×1
- script.crazyegg.com×1
- static.agkn.com×1
- stg.api.bazaarvoice.com×1
- www.facebook.com×1
- z.moatads.com×1
Social
Registration
- Registrar
- CSC Corporate Domains, Inc.
- Created
- 2005-02-18
- Expires
- 2027-02-18 273 days left
- Updated
- 2026-02-14
- Name servers
-
- ns1-06.azure-dns.com
- ns2-06.azure-dns.net
- ns3-06.azure-dns.org
- ns4-06.azure-dns.info
DNS records live
- NS
-
- ns1-06.azure-dns.com
- ns2-06.azure-dns.net
- ns3-06.azure-dns.org
- ns4-06.azure-dns.info
- Verified for
-
Certificate (current)
Sectigo Public Server Authentication CA OV R40
Expires in 154 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
default-src 'self'; style-src 'self' 'unsafe-inline' *.pricespider.com *; img-src * 'self' data: https: blob: *.pricespider.com; manifest-src 'self'; script-src * data: *.pricespider.com blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline' https://*.rudderstack.com https://cdn.rudderlabs.com; font-src * data: blob: 'unsafe-inline'; frame-src *;- strict-transport-security
max-age=31536000; includeSubdomains