shopping.com
HTML metadata
Technology
- Server
- ebay-proxy-server
Third-party hosts loaded (1)
- ir.ebaystatic.com×5
Registration
- Registrar
- MarkMonitor Inc.
- Created
- 1997-07-03
- Expires
- 2026-07-02 42 days left
- Updated
- 2025-05-31
- Name servers
-
- dns1.p06.nsone.net
- dns2.p06.nsone.net
- dns3.p06.nsone.net
- dns4.p06.nsone.net
- ns01.ebaydns.com
- ns02.ebaydns.com
- ns03.ebaydns.com
- ns04.ebaydns.com
DNS records live
- NS
-
- dns1.p06.nsone.net
- dns2.p06.nsone.net
- dns3.p06.nsone.net
- dns4.p06.nsone.net
- ns01.ebaydns.com
- ns02.ebaydns.com
- ns03.ebaydns.com
- ns04.ebaydns.com
- TXT
-
_zyhymohjbjdnfg6mkc986j56khgtkq8
Email authentication no MX
- SPF
- not published
- DMARC
-
v=DMARC1; p=reject; rua=mailto:ebay@rua.agari.com; ruf=mailto:ebay@ruf.agari.com; fo=1; rf=afrf; pct=100policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA OV R40
Expires in 146 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
style-src 'self' 'unsafe-inline' data: *.ebay.com *.www.shopping.com *.ebaystatic.com *.ebaystatic.cn *.gstatic.com *.googleapis.com use.fontawesome.com; connect-src 'self' *.ebay.com *.www.shopping.com *.ebaystatic.com *.ebaystatic.cn data: *.google-analytics.com *.perfdrive.com *.analytics.google.com *.doubleclick.net *.googleapis.com *.shopping.com *.ebayimg.com wss://127.0.0.1:* *.amplitude.com *.pinterest.com *.facebook.com *.google.com *.graphitevault.com *.googletagmanager.com *.criteo.com *.bing.com *.snapchat.com *.reddit.com www.redditstatic.com google.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ebay.com *.www.shopping.com *.ebaystatic.com *.ebaystatic.cn blob: data: *.google-analytics.com *.googletagmanager.com *.fidoapi.com *.translate.google.com *.akamaihd.net *.pinterest.com *.doubleclick.net *.criteo.com *.pinimg.com *.facebook.net sc-static.net *.snapchat.com *.tiqcdn.com www.redditstatic.com; upgrade-insecure-requests; frame-ancestors 'none' ; img-src 'self'- strict-transport-security
max-age=31536000