indexo.dev

shop4guys.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1044 ms crawled 2026-05-19

US · 208.91.204.250 · AS40539 Hosting Consulting, Inc

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Shop 4 Guys

Technology

Server
nginx
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (5)

  • cachemd.cdnhost2000xl.com×17
  • cachewp.cdnhost2000xl.com×2
  • fonts.googleapis.com×2
  • webmasters.hugetraffic.com×1
  • www.googletagmanager.com×1

Registration

Registrar
GoDaddy.com, LLC
Created
2006-11-21
Expires
2026-11-21 184 days left
Updated
2025-11-21
Name servers
  • ns0.reflected.net
  • ns1.reflected.net

DNS records live

NS
  • ns0.reflected.net
  • ns1.reflected.net
MX
  • 10 mail.answer-pro.com
TXT
  • spf2.0/pra,mfrom +mx +ip4:208.91.207.221/26 +ip4:66.165.186.128/25 -all

Email authentication strong

SPF
v=spf1 include:mail.zendesk.com mx -all
strict (-all)
DMARC
v=DMARC1; p=quarantine
policy: quarantine
DKIM
  • default: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqk091T/6Cm3+PhHSk7ZjOwHbwPo4QRh6MJzwcAiebL9ZQsWvlbs4zyipLztAkKXONz+kSxfidBkMRWG85XiyIsAbhrux…
  • mail: v=DKIM1; h=sha256; k=rsa; s=email; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYuVmQY/OjDV01VEBLcwbbOSp+rjVzomPvTY5AWoS3qCiTxasTaI0e5LKvm…
selectors probed

Certificate (current)

E8
from 2026-04-19 to 2026-07-18
Expires in 59 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.shop4guys.com/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
upgrade-insecure-requests; default-src *; media-src * data: blob: rtmp: mediastream:; child-src * data: blob: gsa: webviewprogressproxy:; img-src * data: blob: android-webview-video-poster:; script-src * 'unsafe-inline' 'unsafe-eval' data: opera:; frame-src * 'unsafe-inline' data: gsa: webviewprogressproxy:; style-src * 'unsafe-inline' data:; connect-src * 'unsafe-inline' ws: wss:; font-src * data:; object-src *; report-uri /members/util/log_csp/

Links to (4)

Linked from (1)