huskee.co

HTML metadata

Title: Huskee | Reusable Coffee Cups
Description: Discover Huskee's reusable coffee cups featuring the iconic HuskeeOriginal, crafted from repurposed coffee husk. Our mission is to replace single-use products with better, lasting solutions.
Language: en-AU

Open Graph

url: https://www.huskee.co/
title: Huskee | Reusable Coffee Cups
locale: en_AU
description: Discover Huskee's reusable coffee cups featuring the iconic HuskeeOriginal, crafted from repurposed coffee husk. Our mission is to replace single-use products with better, lasting solutions.

Technology

CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

www.googletagmanager.com×2
fonts.googleapis.com×1
rum.hlx.page×1
static.klaviyo.com×1

Social

DNS records live

NS

ns1.digitalocean.com
ns2.digitalocean.com
ns3.digitalocean.com

MX

0 huskee-co.mail.protection.outlook.com

TXT

Show 10 TXT records

google-site-verification=wb9W9JfO4F8ij4AW1olpvgIDHQYeVfGEt0Ee0ffNeDU
klaviyo-site-verification=UqViN6
anthropic-domain-verification-zcxxnr=wmBziNaowip0FCWGpG1iNxWcr
klaviyo-site-verification=RxMvsb
klaviyo-site-verification=YbEK66
MS=13E2A550480B336ED8C4F89B0C5586EE8AF2D511
MS=ms90835653
google-site-verification=Ez9MN2yhBKs7bkKjEwrhyYCZx_G-rKsrYceG6yBAwa8
MS=ms30387275
klaviyo-site-verification=TSsF5h

Email authentication strong

SPF

v=spf1 include:sendgrid.net include:spf.protection.outlook.com include:_spf.bigcommerce.com include:klaviyomail.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@huskee.co

policy: quarantine

DKIM

Show 5 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2+VQkze20fbe4DUz1iwDyKiJH+nZp6VnFpWkCOt7tZ2RoXqbE+ge9HxEMWmF9VPHZcjGbjaMhpDVD…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDHqZa8Ty+ci0mjnODfRx6ozrBbTfyJFteZIS6FPA+qEkPKX98XydOT7YdFxDKsjZ3n7oAhRCrj0fc…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bhNSVj7gPJgJYreXqKePVrtw4XlbntS4nlnYk6l4D1izJ1fzXBRHLPIB54a4UVDHva9sCwI6kiO+L…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ugOSARyzFKXAMqduajUSK3frVhuIW2O4WyUeYgmqo9qToY3AxNf/UCCrBxnk87BmbiJ2NQYwnIMCDxZgm…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc3sR60XTgM/VF8HwktxKb1Oor90HpIXxWNHqigoCAymz593k4huJ21IiwsCWfrphMJBtCQmPKPXiF1IyU…

selectors probed

Certificate (current)

R12

from 2026-03-30 to 2026-06-28

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.huskee.co/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src *.typekit.net fonts.gstatic.com use.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: https://www.googletagmanager.com https://fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com pro.fontawesome.com fonts.googleapis.com chat-assets.frontapp.com cdnjs.cloudflare.com static.klaviyo.com store-eflga2hmzx.mybigcommerce.com https://pro.fontawesome.com https://cdnjs.cloudflare.com https://static.klaviyo.com https://store-eflga2hmzx.mybigcommerce.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com portal.zakeke.com live.opayo.eu.elavon.com pi-live.sagepay.
strict-transport-security: max-age=31557600
content-security-policy-report-only: default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 'report-sample'; connect-src 'none'; form-action 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp.threatview.app/report; report-to threatview

Links to (4)

Linked from (2)

dunigroup.com×2
borrowbyhuskee.co×1