nectarsleep.com

HTML metadata

Title

Shop The Best Mattress Online | 365-Night Trial & Forever Warranty - Nectar Sleep

Description

At Nectar Sleep, we focus on one thing only – the most comfortable bed possible. Everything we develop, design, and test has only one mission, your rest.

Language

en

Canonical

https://www.nectarsleep.com

Translations

en-ca
en-gb
en-us
fr-ca

Open Graph

url: https://www.nectarsleep.com
title: Shop The Best Mattress Online | 365-Night Trial & Forever Warranty - Nectar Sleep
description: At Nectar Sleep, we focus on one thing only – the most comfortable bed possible. Everything we develop, design, and test has only one mission, your rest.

Technology

CDN: Vercel
CMS: Next.js

Third-party hosts loaded (14)

media.residenthome.com×38
cdn.dynamicyield.com×4
qa-media.residenthome.com×3
cdn.contentful.com×2
rcom.dynamicyield.com×2
st.dynamicyield.com×2
www.affirm.com×2
www.nectarsleep.ca×2
api-cf.affirm.com×1
api.residenthome.com×1
api.yotpo.com×1
assets.residenthome.com×1
js.datadome.co×1
www.nectarsleep.co.uk×1

Social

Contact

Email

support@nectarsleep.com

Phone

+1 (888) 863-2827

Registration

Registrar

Amazon Registrar, Inc.

Created

2016-07-11

Expires

2026-07-11 52 days left

Updated

2026-05-13

Name servers

ns-1041.awsdns-02.org
ns-1668.awsdns-16.co.uk
ns-321.awsdns-40.com
ns-893.awsdns-47.net

DNS records live

NS

ns-1041.awsdns-02.org
ns-1668.awsdns-16.co.uk
ns-321.awsdns-40.com
ns-893.awsdns-47.net

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 15 TXT records

klaviyo-site-verification=MnmUpS
google-site-verification=AXfL5eVn9TtNABGaONfPhUMQVdp-2ib7TafXe6ZoI30
google-site-verification=hoUzJrovhTjQRnIMR6Vm5UKBMRsHoG_Qr_AOWvWXVXA
_globalsign-domain-verification=KNVFwiIau0UPX7e9YI_-YKI2YdlopUxcXX_0EgGYBQ
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;
notion-domain-verification=QLI1mAlgvVhKouWKf2cwQv1R624lyj68oBZ8EQkIBsW
google-site-verification=XQGTktUbYR3pItmxtgAKaaOGPy-hcV-0mCUJVkFwHd0
google-site-verification=iFhTMrF4QSDCaMwaQ72RZmrLVscF5AXsI3Z0C0Q-Kh4
google-site-verification=6ycwpy4LfdNnRTXd5UPKzBuuMLAsdODSR1PwR45FmCs
klaviyo-site-verification=HxVq3y
facebook-domain-verification=ogh1u7acpdund6x3ilwj700w7cvns7
_globalsign-domain-verification=5gwbTrtjX4CPebqVSR8L6SpOvnf_3_6K7X0z_Izh9q
_5rcj24nazlhcrfc9xbu2qn4cj9q6aun
apple-domain-verification=NpYmUHRZul4oXA-z4d4RnT25Sv4PTR-490GOFF_GvGM
ahrefs-site-verification_1955d5c1f3dc3c300eccdc472dcaf32c7eed43beb25bdd5b68a9a5e69ccf6e2a

Email authentication strong

SPF

v=spf1 include:_spf.nectarsleep_com._d.easydmarc.pro ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:9611758013@rua.easydmarc.us,mailto:dmarc@residenthome.com;ruf=mailto:9611758013@ruf.easydmarc.us;ri=86400;fo=1;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvFHG1orHPLBR8ktGGKs5pogQKUWF9FM6aKUPuhVI2ZXzLuaSx69TSYylEaPo1pt3J24Bau+Ucsh63Dj/WDe…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H7I4QyPJLDb4VCzzcV8mYxAKOCm9MrQz4graCnyXvGrVw0w6MrxefVB3MtNoU/T9VCyaNcdsNQCbmSCRz…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWLiEiPtEitla+4jor54Ye+kOrIrgnzgTqbBYrvXQJKDk94qaXN7d4WFMTPLVhKIlRP29DLzI+4TXmeQJO…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

R13

from 2026-04-16 to 2026-07-15

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.nectarsleep.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: object-src *; script-src 'unsafe-inline' 'unsafe-eval' https: http: 'self' blob:; base-uri https: http:; frame-ancestors https://app.contentful.com
strict-transport-security: max-age=31557600