malebrazilianwaxingnyc.com

.com crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 843 ms crawled 2026-05-30

CA · 192.99.165.193 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Men's Waxing Spa NYC | Male Brazilian Waxing Midtown Manhattan
Description: NYC's #1 men waxing spa. Brazilian wax, back wax, chest wax & full-body hair removal for men in Midtown Manhattan. Private rooms, certified specialists, 10,000+ clients. Book online today.
Language: en
Canonical: https://malebrazilianwaxingnyc.com/

Open Graph

url: https://malebrazilianwaxingnyc.com/
title: Men's Waxing Spa NYC | Male Brazilian Waxing Midtown Manhattan
locale: en_US
site name: Male Brazilian Waxing NYC
description: NYC's #1 men waxing spa. Brazilian wax, back wax, chest wax & full-body hair removal for men in Midtown Manhattan. Private rooms, certified specialists, 10,000+ clients. Book online today.

Technology

Server: Apache

Social

Contact

Phone

+12122540926

Address

150 East 39th Street, First Floor, 10016, New York, NY, US

Registration

Registrar

GoDaddy.com, LLC

Created

2012-06-19

Expires

2026-06-19 17 days left

Updated

2024-06-13

Name servers

ns71.domaincontrol.com
ns72.domaincontrol.com

DNS records live

NS

ns71.domaincontrol.com
ns72.domaincontrol.com

MX

0 smtp.secureserver.net
10 mailstore1.secureserver.net

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

from 2026-05-13 to 2026-08-11

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://malebrazilianwaxingnyc.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' fonts.googleapis.com;style-src 'self' 'unsafe-inline';font-src 'self';img-src 'self' data: https://www.malebrazilianwaxingnyc.com https://www.google.com https://maps.googleapis.com https://maps.gstatic.com https://dyannaspa.com;frame-src 'self' https://www.google.com;connect-src 'self';base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin