nativebrands.co
HTML metadata
Technology
- Server
- LiteSpeed
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- Lagos, Lagos State, NG
DNS records live
- NS
-
- earl.ns.cloudflare.com
- melina.ns.cloudflare.com
- MX
-
- 10 mx2-hosting.jellyfish.systems
- 20 mx3-hosting.jellyfish.systems
- 5 mx1-hosting.jellyfish.systems
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 +a +mx +ip4:198.54.114.35 include:spf.web-hosting.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg7GOSifW0BAaoxmVhxsd48c/oSwn5/bJNseNo4adi6jtGItKKdqLTmdwAByrMfaeaefs3Ewcp2Xz6…
selectors probed - default:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 77 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
origin-when-cross-origin- x-frame-options
DENY- permissions-policy
camera=(), microphone=(), geolocation=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://res.cloudinary.com https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://nativeos-api.nativebrands.co https://www.google-analytics.com https://www.googletagmanager.com; media-src 'self' blob: data:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self' https://nativeos-api.nativebrands.co; frame-ancestors 'none'; upgrade-insecure-requests
Links to (6)
- awwwards.com×2
- dribbble.com×2
- instagram.com×2
- linkedin.com×2
- twitter.com×2
- x.com×2