johnboos.com

HTML metadata

Title: John Boos & Co. | The Trusted Tradition
Description: World-Renowned Cutting Boards, Butcher Blocks, Carts, Islands and More for Residential Kitchens and Stainless Steel Foodservice Equipment for Commercial Kitchens.
Language: en
Canonical: https://www.johnboos.com/

Open Graph

title: John Boos & Co. | The Trusted Tradition
description: World-Renowned Cutting Boards, Butcher Blocks, Carts, Islands and More for Residential Kitchens and Stainless Steel Foodservice Equipment for Commercial Kitchens.

Technology

CDN: Cloudflare
CMS: Shopify

Analytics

Google Tag Manager

Third-party hosts loaded (5)

cdn.shopify.com×70
www.googletagmanager.com×2
dev.visualwebsiteoptimizer.com×1
js.hs-scripts.com×1
shop.app×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1998-03-25

Expires

2028-03-24 657 days left

Updated

2025-01-23

Name servers

ns81.worldnic.com
ns82.worldnic.com

DNS records live

NS

ns81.worldnic.com
ns82.worldnic.com

MX

10 mx1-us1.ppe-hosted.com
10 mx2-us1.ppe-hosted.com
90 johnboos-com.mail.protection.outlook.com

TXT

klaviyo-site-verification=YAm9Hi
ppe-fba478dbd6f009af43a87d7593a79a06a86012bc
lucidlink-verification=DVCHK6QJ9KZX0Z9JCVW0EGR814

Verified for

Apple
Google

Email authentication partial

SPF

v=spf1 include:_spf-us.ppe-hosted.com include:_spf.google.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;rua=mailto:dmarcreports@johnboos.com

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCONF0NL1AmKw1O1/a/ulkLWkCCu/d7Jp1BZUBW1EkoYtz9LOs9YisElfUEWEMmId9hpDVPv9SwSxSOTDScJD…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

E7

from 2026-05-16 to 2026-08-14

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.johnboos.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src 'self' 'nonce-19ecdf4d3fe8b430d76c79d376d219f9' https://cdn.shopify.com https://shopify.com; frame-ancestors 'none'; style-src 'self' *.googleapis.com *.gstatic.com *.johnboos.com *.klaviyo.com *.typekit.net 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src *.vimeo.com vimeo.com *.johnboos.devbox *.bugsnag.com/ *.pusher.com *.bugherd.com/ *.yotpo.com *.gorgias.chat wss://*.gorgias.chat wss://*.pusher.com *.shopify.com *.google.com *.google.ca *.linkedin.com *.google-analytics.com *.pinterest.com *.johnboos.com *.upsellit.com *.klaviyo.com *.datadome.co *.mczbf.com *.sjwoe.com *.cj.dotomi.com *.emjcd.com *.idsync.rlcdn.com *.cj.com *.visualwebsiteoptimizer.com faas-nyc1-2ef2e6cc.doserverless.co *.googleadservices.com *.doubleclick.net *.hscollectedforms.net *.pinimg.com checkout.johnboos.com 'self' https://monorail-edge.shopifysvc.com https://checkout.johnboos.com https://www.johnboos.com; font-src data: 'self' https://cdn.shopify.com *.shopify.com
strict-transport-security: max-age=31536000