masterofseeds.com

HTML metadata

Title

Master of Seeds — Premium Cannabis Seeds, Headshop & Smartshop

Description

Buy premium cannabis seeds online. Feminized, autoflowering & CBD seeds from top breeders. Fast, discreet shipping from the Netherlands. Free shipping over €39.

Language

en

Canonical

https://masterofseeds.com

Translations

cs
de
en
es
fr
it
nl
pl
sv

Open Graph

url: https://masterofseeds.com
title: Master of Seeds — Premium Cannabis Seeds, Headshop & Smartshop
description: Buy premium cannabis seeds online. Feminized, autoflowering & CBD seeds from top breeders. Fast, discreet shipping from the Netherlands.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (10)

www.googletagmanager.com×2
masterofseeds.cz×1
masterofseeds.de×1
masterofseeds.es×1
masterofseeds.fr×1
masterofseeds.it×1
masterofseeds.nl×1
masterofseeds.pl×1
masterofseeds.se×1
widget.trustpilot.com×1

Social

Contact

Phone

0858209902

Registration

Registrar

Tucows Domains Inc.

Created

2025-11-30

Expires

2026-11-30 182 days left

Updated

2025-12-03

Name servers

hank.ns.cloudflare.com
reza.ns.cloudflare.com

DNS records live

NS

hank.ns.cloudflare.com
reza.ns.cloudflare.com

MX

0 masterofseeds-com.mail.protection.outlook.com

Verified for

Microsoft 365

Email authentication strong

SPF: v=spf1 a mx include:_spf.hostnet.nl include:spf.protection.outlook.com include:amazonses.com ~all
softfail (~all)
DMARC: v=DMARC1; p=reject
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-03-31 to 2026-06-29

Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://masterofseeds.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; form-action 'self' https://www.mollie.com https://*.mollie.com; frame-ancestors 'none'; frame-src https://www.googletagmanager.com https://widget.trustpilot.com https://*.trustpilot.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://app.weply.chat https://widget.trustpilot.com https://*.trustpilot.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.weply.chat https://region1.google-analytics.com https://widget.trustpilot.com https://*.trustpilot.com; object-src 'none'; upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains; preload