sunbrella.com
HTML metadata
Technology
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (6)
- www.dwin1.com×2
- apps.bazaarvoice.com×1
- cookie-cdn.cookiepro.com×1
- rum.hlx.page×1
- static.klaviyo.com×1
- www.googletagmanager.com×1
Social
Contact
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 1995-10-13
- Expires
- 2026-10-12 146 days left
- Updated
- 2025-09-19
- Name servers
-
- dns1.p08.nsone.net
- dns2.p08.nsone.net
- dns3.p08.nsone.net
- dns4.p08.nsone.net
DNS records live
- NS
-
- dns1.p08.nsone.net
- dns2.p08.nsone.net
- dns3.p08.nsone.net
- dns4.p08.nsone.net
- MX
-
- 0 sunbrella-com.mail.protection.outlook.com
- TXT
-
Show 4 TXT records
facebook-domain-verification=19eroixe3e81du0vnqrnnjgwohqi1iMS=ms58340442_globalsign-domain-verification=OMpilx-OAWbso0ODurcEtGXATmn0Ia-0UJHvbT99m8google-site-verification=PGXq0TSmCEqhPG-oCNZA_vk9otHAg-oLGeXFX8unrCQ
Email authentication strong
- SPF
-
v=spf1 ip4:66.129.66.182 ip4:66.162.13.34 ip4:135.84.68.123 ip4:208.86.168.7 ip4:107.20.210.250 ip4:52.1.14.157 ip4:4.14.83.66 ip4:4.14.80.98 ip4:172.19.21.125 include:spf.protection.outlook.com include:mailgun.org include:sendgrid.net include:shops.shopify.com include:mail.zendesk.com include:docebosaas.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=reject;fo=1;rua=mailto:acea34cb@mxtoolbox.dmarc-report.com,mailto:rua+sunbrella.com@dmarc.barracudanetworks.com;ruf=mailto:acea34cb@forensics.dmarc-report.com,mailto:ruf+sunbrella.com@dmarc.barracudanetworks.com;pct=10policy: reject (enforced) · pct=10 - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QPecHx7y7egpw3/CtcZV4TKFxcA2XvJCNp9wrPE2qQ29NH77gMnTuSZxge1y+dakeFqcG3s3gVczb… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv22lMhIvubAV3FI5DfXpHS8z2pY+GnO+UD8KBq2aS3qWU5fqRducDapj+UcIeNT5QYIa4Rw9vE2j4E… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1GeAsbBa1mIvRD5B82BMDw9LFTQWeejH9MOofxs5/fa+SMDerJNxXjz6qE3fzLVS2q3gBirjfQZzW6DY4… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD11Li9Z153J8lQwieJZH227y9QVpAljOR2PYRpWBUJAf+YQ3Et0y+jNQ3asgNMma8jn1dCf3cVlCMzOHrPh22Ayi…
selectors probed - selector1:
Certificate (current)
R12
Expires in 38 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com https://media.glenraven.com *.us-central1.run.app *.pipedrive.com *.pipedriveassets.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.pipedrive.com *.pipedriveassets.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.meetanshi.com meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.card- strict-transport-security
max-age=31536000