postino.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 2017 ms crawled 2026-05-19

US · 216.150.1.1 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Home | Postino
Description: Postino is the Valley's original neighborhood WineCafe. Set in comfortable, rustic and immaculately restored buildings, each Postino combines unique wines.
Canonical: https://www.postino.com

Open Graph

title: Home
locale: en_US

Technology

CDN: Vercel
CMS: Next.js

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (4)

images.ctfassets.net×17
fonts.googleapis.com×2
use.typekit.net×2
fonts.gstatic.com×1

Social

Contact

Address: rd Projects©2026

Registration

Registrar

Cloudflare, Inc.

Created

1996-06-05

Expires

2027-06-04 380 days left

Updated

2025-11-23

Name servers

marvin.ns.cloudflare.com
sneh.ns.cloudflare.com

DNS records live

NS

marvin.ns.cloudflare.com
sneh.ns.cloudflare.com

TXT

google-site-verification=RAI4pPh4m7ugAaX0JL-aIbuxmTuunHoAkaYSRPe1ZUs
google-site-verification=uePZjlCL9KB4P7HnXdtuocyMW0pebkzZ3c3ay3axGSM

Email authentication no MX

SPF: v=spf1 include:49128600.spf51.hubspotemail.net ~all
softfail (~all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-03-23 to 2026-06-21

Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.postino.com/

present

strict-transport-security
content-security-policy-report-only
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy
missing frame protection

Header values

referrer-policy: origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self'; frame-src 'self' wine-cult.firebaseapp.com *.youtube.com *.spotify.com *.vimeo.com *.doubleclick.net *.facebook.com *.trkn.us *.googletagmanager.com *.googlesyndication.com vercel.live vercel.com *.instagram.com form.jotform.com *.ctfassets.net *.audioeye.com *.pinterest.com *.stripe.com *.hsforms.com *.hsforms.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.adsrvr.org *.googlesyndication.com *.youtube.com *.spotify.com *.vimeo.com maps.googleapis.com form.jotform.com *.vercel.live *.audioeye.com *.tiktok.com *.adroll.com *.nextdoor.com *.stackadapt.com *.pinterest.com *.pinimg.com *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com snap.licdn.com *.facebook.net *.pixeltracker.co *.stripe.com *.hsforms.net *.hubspotusercontent-na1.net *.hsappstatic.net *.hubspot.com; child-src 'self' *.youtube.com *.google.com *.spotify.com vercel.live