polyjohn.com

.com crawl

First seen 2026-04-28 · Last seen 2026-05-18 · ok HTTP/1.1 200 2575 ms crawled 2026-05-07

US · 209.126.25.232 · AS36444 Liquid Web, L.L.C

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Portable sinks, toilets, and sanitation equipment | PolyJohn
Language: en

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Cookie consent

Iubenda

Social widgets

Vimeo Embed
YouTube Embed

Third-party hosts loaded (4)

cdn.iubenda.com×3
www.youtube.com×3
player.vimeo.com×2
www.googletagmanager.com×1

Social

Contact

Email

Phone

800.292.1305

Registration

Registrar

GoDaddy.com, LLC

Created

1998-01-08

Expires

2028-01-07 597 days left

Updated

2023-01-08

Name servers

ns14.zoneedit.com
ns7.zoneedit.com

DNS records live

NS

ns14.zoneedit.com
ns7.zoneedit.com

MX

10 polyjohn-com.mail.protection.outlook.com

TXT

Show 6 TXT records

d365mktkey=ymvEMZv5feweBPJj8x9MFvBWTVJpfTRHFpfBxBwgB18x
logmein-verification-code=1dbd72b7-0a68-4316-ae4d-77b3409e5da2
srenlr6etll652sjdvlm6ggd3g
eildeorjeor8c574r6k1sslt98
po9f649d2kgg0e7au2jlqoml4m
MS=ms48760428

Email authentication strong

SPF

v=spf1 ip4:209.126.25.232 ip4:99.122.249.42 ip4:168.93.133.100 ip4:168.93.133.98 include:americaneagle.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@polyjohn.com; ruf=mailto:dmarc@polyjohn.com;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClYA2b1bNndwuJ7PxYNI5MardHpjCvkBmG02+M/GQMWisQvYvH5xKPXq+gWhYEBDDXSoEkfFXoOflwxMXwoh…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ve7YwpVSzhIQsyCRrbEPoxytp8Ipyk7JCdE2zM61jGJPzwRRW7Icfz5dAEBhhkJ6fYpPk8+A19GbE…

selectors probed

Certificate (current)

R12

from 2026-04-14 to 2026-07-13

Expires in 55 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.polyjohn.com/

present

content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy-report-only: font-src www.paypalobjects.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com https://fonts.gstatic.com *.cloudfront.net *.fontawesome.com https://www.google.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com *.twitter.com *.google.com *.paypal.com *.reviews.co.uk