surfinshape.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Shopify
- jQuery
- 1.10.2 known XSS (<3.5)
- Fonts
-
- Google Fonts
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (9)
- cdn.judge.me×3
- cdn.shopify.com×3
- fonts.googleapis.com×3
- code.ionicframework.com×2
- shop.app×2
- monorail-edge.shopifysvc.com×1
- snapppt.com×1
- www.paypal.com×1
- www.youtube.com×1
Social
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2011-02-07
- Expires
- 2027-11-09 521 days left
- Updated
- 2022-11-10
- Name servers
-
- ns55.domaincontrol.com
- ns56.domaincontrol.com
DNS records live
- NS
-
- ns55.domaincontrol.com
- ns56.domaincontrol.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
Email authentication weak
- SPF
- not published
- DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - k2:
Certificate (current)
YE1
Expires in 82 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- short HSTS max-age
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;- strict-transport-security
max-age=7889238