sitkagear.com

HTML metadata

Title: SITKA Gear | Turning Clothing Into Gear
Description: SITKA Gear uses advanced design, technology and fabrics to create hunting gear systems that enhance the experience of the hunter. Explore SITKA today.
Language: en

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (3)

a42cdn.usablenet.com×1
try.abtasty.com×1
www.googletagmanager.com×1

Social

Contact

Phone

877-748-5247

Registration

Registrar

MarkMonitor Inc.

Created

2005-09-24

Expires

2026-09-24 127 days left

Updated

2025-08-23

Name servers

ns-1133.awsdns-13.org
ns-1603.awsdns-08.co.uk
ns-318.awsdns-39.com
ns-707.awsdns-24.net

DNS records live

NS

ns-1133.awsdns-13.org
ns-1603.awsdns-08.co.uk
ns-318.awsdns-39.com
ns-707.awsdns-24.net

MX

10 mxa-00186101.gslb.pphosted.com
10 mxb-00186101.gslb.pphosted.com

TXT

Show 10 TXT records

anthropic-domain-verification-k79zk7=8ZTG7ZJPxvzrSutEP5b9Wnayn
google-site-verification=B6jeA4PBRSDS6jnlXFNAelvFi4jKhY3Cug4YIasH5As
google-site-verification=O1NEXP_xWtqjp95I1U0bis3dNBQNDTu1HoKAl0-FdNU
hj-ownership=1427374-20220308
ip4:52.200.252.231
ip4:52.21.224.229
klaviyo-site-verification=SU7UK9
openai-domain-verification=dv-TcQJY7CDvOpBPxSGTbL3lWHZ
scnv-verification=4def4ab988801890122e8bab518f1e50:6ecd40e9ede7fc7c7eb0949b4e37463c:854d2eba1a4647b1a5629f10a4245c0c
yahoo-verification-key=ggU1r9nXk0y/u2elET3buL5KdP3jU6pexII4dKVYxfY=

Email authentication partial

SPF

v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email,mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com; fo=1

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdhYAumIQfamGwL5rB2wIDgVXEZUvuJcMez9E4f8wr5EPj8utL0LtS4ICxXP2JibD95lYzSDUr8ChP…

selectors probed

Certificate (current)

R13

from 2026-03-29 to 2026-06-27

Expires in 38 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.sitkagear.com/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://app.contentful.com; worker-src blob:; default-src 'self' gap: ws: 'unsafe-inline' 'unsafe-eval' data: api.country.is vercel.live vercel.app *.vercel.live *.vercel.app safevisit.online contentful.com *.contentful.com *.googleapis.com *.youtube.com *.paypal.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.com.ph *.google.ca *.google.ie *.google.co.in *.facebook.com *.amazonaws.com *.cloudfront.net *.googletagservices.com pay.google.com *.s3.amazonaws.com google.com *.sitkagear.com js.narvar.com cdn.searchspring.net js.klarna.com manifest.webmanifest cdn.tailwindcss.com cdn.cookielaw.org api.yotpo.com cdn-widgetsrepository.yotpo.com *.yotpo.com *.searchspring.io *.bigcommerce.com *.locally.com *.ctfassets.net *.onetrust.com *.criteo.com *.avmws.com *.safevisit.online *.gtm-msr.appspot *.dynamic.criteo.com *.facebook.net *.klaviyo.com *.zdassets.com *.vercel-insights.com *.csper.io klarnaservices.com *.klarnaservices.com *.gstatic.com *
strict-transport-security: max-age=5184000; includeSubDomains
content-security-policy-report-only: frame-ancestors 'self' https://app.contentful.com; worker-src blob:; default-src 'self' gap: ws: 'unsafe-inline' 'unsafe-eval' data: api.country.is vercel.live vercel.app *.vercel.live *.vercel.app safevisit.online contentful.com *.contentful.com *.googleapis.com *.youtube.com *.paypal.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.com.ph *.google.ca *.google.ie *.google.co.in *.facebook.com *.amazonaws.com *.cloudfront.net *.googletagservices.com pay.google.com *.s3.amazonaws.com google.com *.sitkagear.com js.narvar.com cdn.searchspring.net js.klarna.com manifest.webmanifest cdn.tailwindcss.com cdn.cookielaw.org api.yotpo.com cdn-widgetsrepository.yotpo.com *.yotpo.com *.searchspring.io *.bigcommerce.com *.locally.com *.ctfassets.net *.onetrust.com *.criteo.com *.avmws.com *.safevisit.online *.gtm-msr.appspot *.dynamic.criteo.com *.facebook.net *.klaviyo.com *.zdassets.com *.vercel-insights.com *.csper.io klarnaservices.com *.klarnaservices.com *.gstatic.com *