omorpho.com

.com crawl

First seen 2026-04-12 · Last seen 2026-05-09 · ok HTTP/1.1 200 1350 ms crawled 2026-05-04

CA · 23.227.38.65 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: OMORPHO Weighted Training Gear
Description: Weighted Training Gear from OMORPHO makes you stronger. Home of the award-wining G-Vest and the innovative MicroLoad™ G-Wear collection.
Language: en
Canonical: https://omorpho.com

Open Graph

url: https://omorpho.com
title: OMORPHO Weighted Training Gear
description: Weighted Training Gear from OMORPHO makes you stronger. Home of the award-wining G-Vest and the innovative MicroLoad™ G-Wear collection.

Technology

CDN: Cloudflare
CMS: Shopify

Third-party hosts loaded (7)

cdn.sanity.io×38
cdn.shopify.com×36
cdn-widgetsrepository.yotpo.com×1
cdn.gomega.ai×1
monorail-edge.shopifysvc.com×1
shop.app×1
static.klaviyo.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2008-11-15

Expires

2027-11-15 545 days left

Updated

2025-11-16

Name servers

lisa.ns.cloudflare.com
mario.ns.cloudflare.com

DNS records live

NS

lisa.ns.cloudflare.com
mario.ns.cloudflare.com

MX

10 mx1-us1.ppe-hosted.com
20 mx2-us1.ppe-hosted.com

TXT

Show 10 TXT records

google-site-verification=7e4nbkjijz83JCUw6qqc-2OIKT-AVO_Clqde3MBZzv4
google-site-verification=ugoAMH1yaD2uQ9WgEm6Be6bTPfjhvl4Qf1TtWPcMYP4
klaviyo-site-verification=TTXT29
pinterest-site-verification=326fe52df394d472ca4f13fa73dffedd
prowly-verification=d6b4f0d982dd4db2e0cc6d2716a77762a742e8695b9ed1214bbe3d0ff9737901
v=spf1 a:dispatch-us.ppe-hosted.com include:secureserver.net include:mailgun.org ~all
CDC6971CD1
NETORG6079653.onmicrosoft.com
apple-domain-verification=ff0C4AK8g7c6zQTcbtRkKh9-9cOJXEQeDinLkjihMgo
facebook-domain-verification=erof99qca4fgugbtgzgop4910mhz9x

Certificate (current)

from 2026-04-27 to 2026-07-26

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://omorpho.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src https://cdn.sanity.io https://lh3.googleusercontent.com https://cdn-widgetsrepository.yotpo.com https://loyalty.yotpo.com 'self' 'nonce-0ee0b9683f4e1eea5006681e4918ec38' https://cdn.shopify.com https://shopify.com; frame-ancestors http://localhost:3333 'self' https://omorpho.sanity.studio; style-src 'self' https://cdn-widgetsrepository.yotpo.com http://staticw2.yotpo.com https://loyalty.yotpo.com https://*.gorgias.help/ https://fonts.googleapis.com https://*.klaviyo.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src 'self' https://*.shopify.com/ https://inferred.litix.io/ https://*.mux.com/ https://*.fastly.mux.com https://4comvwrc.api.sanity.io wss://4comvwrc.api.sanity.io https://api-cdn.yotpo.com http://staticw2.yotpo.com https://loyalty.yotpo.com https://cdn-widgetsrepository.yotpo.com https://*.ingest.us.sentry.io https://*.ingest.sentry.io https://production.cdp.ingest.chord.co https://*.facebook.com https://connect.facebook.net https://*
strict-transport-security: max-age=31536000