nunababy.com

HTML metadata

Title

Nuna | Functional Car Seats, Premium Strollers & Baby Gear

Description

At Nuna Baby, we curate practical & functional designs for every step of your parenting journey. Mindfully manufactured + innovatively designed baby gear.

Language

en

Canonical

https://nunababy.com/usa

Translations

cs-cz
de-ch
de-de
en-au
en-gb
en-my
en-nz
en-sg
en-us
en-za
es-es
fr-ch
fr-fr
it-it
ja-jp
ko-kr
nl-nl
zh-cn
zh-tw

Open Graph

url: https://nunababy.com/usa
title: Nuna | Functional Car Seats, Premium Strollers & Baby Gear
site name: Nuna Baby Gear
description: At Nuna Baby, we curate practical & functional designs for every step of your parenting journey. Mindfully manufactured + innovatively designed baby gear.

Technology

CMS: Gatsby

Analytics

Google Tag Manager

Cookie consent

Osano

Third-party hosts loaded (10)

js.klevu.com×6
nunababy.eu×5
apps.bazaarvoice.com×2
rum.hlx.page×2
www.googletagmanager.com×2
cmp.osano.com×1
instant.page×1
static.zdassets.com×1
statsjs.klevu.com×1
www.facebook.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2013-07-26

Expires

2026-07-26 68 days left

Updated

2024-07-27

Name servers

ns-1480.awsdns-57.org
ns-1886.awsdns-43.co.uk
ns-435.awsdns-54.com
ns-524.awsdns-01.net

DNS records live

NS

ns-1480.awsdns-57.org
ns-1886.awsdns-43.co.uk
ns-435.awsdns-54.com
ns-524.awsdns-01.net

MX

0 nunababy-com.mail.protection.outlook.com

TXT

Show 10 TXT records

google-site-verification=cthFc8NzPZNRiEZXr8_rb7lqxyEoFt96vqYHMSud3Lc
google-site-verification=hX-2rTkSyhVx--ur-8hnsQfZZ34FgKsIE-cP_KHCSHg
jamf-site-verification=nzXf_k7JpODCPNx6KPahpw
knowbe4-site-verification=f91c00d6adf71585c79fb7ded4b9201a
parsec-domain-verification=td_32nQUwdgaK0ZnngXNElaLYddAhd
yandex-verification: 55a7b51f6cd181c4
MS=ms85429223
airtable-verification=06713564ad9ad536914daf8c6499fb13
apple-domain-verification=lcRZmVT4ublfqvXp
facebook-domain-verification=zp67e2zp7avz6dhyzvxvu6qf7nr893

Email authentication strong

SPF

v=spf1 a mx include:_spf1.nunababy.com include:_spf2.nunababy.com include:_spf3.nunababy.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/eo+YV9VajdJzpOzIS0NfA71VRBHLfXAhBxkn98cRMG9HaHHzmOML93IcNGCEG5v9STRRXhWA6gg/VUOR…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCpcL9T8s6nGu2VrKlMeAN8NtdIJJWjuntGUBoX/JH7SPm91ty/BZt0WjO5Uqm8XIMcG47QaU1wx/zuElWpqFPkmD…

selectors probed

Certificate (current)

R12

from 2026-04-07 to 2026-07-06

Expires in 49 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://nunababy.com/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
strict-transport-security: max-age=31536000
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com ge