indexo.dev

romeosfalmouth.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-19 · ok HTTP/1.1 200 280 ms crawled 2026-05-07

US · 188.114.96.3 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Home - Romeo's
Description
At Romeo’s, we use the best ingredients in everything we create. The food and drinks we serve are our foundation for excellent hospitality.
Language
en-US
Generator
WordPress 6.9.4
Canonical
https://romeosfalmouth.com/
Feeds

Open Graph

url
https://romeosfalmouth.com/
title
Home - Romeo's
locale
en_US
site name
Romeo's
description
At Romeo’s, we use the best ingredients in everything we create. The food and drinks we serve are our foundation for excellent hospitality.

Technology

CDN
Cloudflare
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (4)

  • fonts.googleapis.com×6
  • fonts.gstatic.com×1
  • gmpg.org×1
  • www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar
NameCheap, Inc.
Created
2024-02-09
Expires
2027-02-09 264 days left
Updated
2026-01-10
Name servers
  • jake.ns.cloudflare.com
  • lisa.ns.cloudflare.com

DNS records live

NS
  • jake.ns.cloudflare.com
  • lisa.ns.cloudflare.com
MX
  • 0 romeosfalmouth-com.mail.protection.outlook.com
Verified for
  • Google

Email authentication partial

SPF
v=spf1 include:spf.protection.outlook.com include:amazonses.com ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-03-31 to 2026-06-29
Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://romeosfalmouth.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • weak frame protection
  • weak content type protection
  • missing Permissions Policy
Header values
referrer-policy
no-referrer-when-downgrade, strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN, SAMEORIGIN
x-content-type-options
nosniff, nosniff
content-security-policy
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'unsafe-inline' https:; img-src https: data:; connect-src 'self' https: wss:; font-src https: data:; media-src https:; form-action https:; frame-ancestors https:; object-src https:; frame-src https:; worker-src https:; base-uri 'self'; block-all-mixed-content
strict-transport-security
max-age=31536000; includeSubDomains

Links to (4)

Linked from (2)