indexo.dev

jameshardie.eu

.eu crawl

First seen 2026-04-13 · Last seen 2026-05-08 · ok HTTP/1.1 200 1150 ms crawled 2026-05-07

US · 64.239.109.1 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
James Hardie | Choose Your Market Quickly & Easily
Description
Select from various markets to discover tailored offers and insights. Fast and simple market selection for targeted searches and optimal results.
Language
en

Technology

CDN
Vercel
CMS
Next.js

Third-party hosts loaded (1)

  • cdn.sitebrunch.com×1

DNS records live

NS
  • davina.ns.cloudflare.com
  • steven.ns.cloudflare.com
TXT
Show 5 TXT records
  • MS=ms29257617
  • google-site-verification=uWIz47ElZ2YddlG3xmip7dYH6PxuEcJHSvNfFg34kfY
  • jhjameshardie.azurewebsites.net
  • pardot709393=c61fbb95fde2cd2efa5e330ef78257c764ac97949fef7b15e4daaf18a6db7417
  • G+hUe/kKEr6a+g+zoq5hef9Fr9SKV+FMrvkHi8/YXB6hm9T10bweXhOcfnZXw0H959SpNb6bLijijfQDa6ZCYQ==

Email authentication no MX

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-04-01 to 2026-06-30
Expires in 42 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.jameshardie.eu/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
Header values
referrer-policy
strict-origin-when-cross-origin
permissions-policy
geolocation=(self)
x-content-type-options
nosniff
content-security-policy
default-src *; img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com; object-src 'none'; frame-ancestors 'self' https://*.storyblok.com https://*.jameshardie.eu https://cdn.cookielaw.org; upgrade-insecure-requests; block-all-mixed-content; worker-src blob: 'self';
strict-transport-security
max-age=63072000; includeSubDomains; preload

Linked from (4)