tecovas.com

HTML metadata

Title: Tecovas Cowboy Boots, Work Boots & Western Wear for Men, Women & Kids | Tecovas
Description: Tecovas offers beautiful, handmade western boots & accessories sold directly to you at honest prices. Free shipping, returns, & exchanges.
Language: EN
Canonical: https://www.tecovas.com

Open Graph

url: https://www.tecovas.com
title: Tecovas Cowboy Boots, Work Boots & Western Wear for Men, Women & Kids | Tecovas
image:url: https://cdn.sanity.io/images/v8kybopt/production/4c436332dc3dd7b6c2edac8d103dba684d0b5517-1536x864.jpg?auto=format&fit=max&w=1200
description: Tecovas offers beautiful, handmade western boots & accessories sold directly to you at honest prices. Free shipping, returns, & exchanges.

Technology

CDN: Cloudflare
CMS: Shopify

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (13)

cdn.shopify.com×28
use.typekit.net×4
assets.armanet.us×1
bigsur.ai×1
cdn.attn.tv×1
cdn.sanity.io×1
cdn.speedcurve.com×1
js.squarecdn.com×1
media.evolv.ai×1
static.fbot.me×1
tag.wknd.ai×1
tags.pw.adn.cloud×1
www.googletagmanager.com×1

Social

Contact

Address: 901 E 6th Street, Floor 3, Suite 300, 78702, Austin, TX, US

Registration

Registrar

GoDaddy.com, LLC

Created

2012-01-07

Expires

2028-01-07 596 days left

Updated

2023-04-10

Name servers

ns13.domaincontrol.com
ns14.domaincontrol.com

DNS records live

NS

ns13.domaincontrol.com
ns14.domaincontrol.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
30 alt2.aspmx.l.google.com
40 aspmx2.googlemail.com
50 aspmx3.googlemail.com

TXT

6DAA730277
klaviyo-site-verification=mtHFpD

Verified for

1Password
Anthropic
Apple
DocuSign
Google
Meta
Miro
OneTrust
OpenAI
Shopify
Zoom

Email authentication strong

SPF

v=spf1 ip4:64.34.190.85 ip4:64.34.175.88 ip4:64.34.175.89 ip4:64.34.175.15 ip4:64.34.175.54 ip4:64.34.175.82 ip4:64.34.182.98 ip4:64.34.182.103 ip4:64.34.182.104 include:_spf.google.com include:sendgrid.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:dmarc-reports@tecovas.com;

policy: reject (enforced) · sp=reject

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinn99IaGDKWdZ9Yzr/091hHUQuhjFMs8w6TV5nTcY9O1BMxfUXLenXMlHhozCSs1LisPEzXQlhW6uM…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H7I4QyPJLDb4VCzzcV8mYxAKOCm9MrQz4graCnyXvGrVw0w6MrxefVB3MtNoU/T9VCyaNcdsNQCbmSCRz…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWLiEiPtEitla+4jor54Ye+kOrIrgnzgTqbBYrvXQJKDk94qaXN7d4WFMTPLVhKIlRP29DLzI+4TXmeQJO…

selectors probed

Certificate (current)

E8

from 2026-03-29 to 2026-06-27

Expires in 37 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.tecovas.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: base-uri https://*.attn.tv 'self'; default-src ws://* 'self' 'nonce-b8fe2a39eb833467fc34c72909596ac5' https://cdn.shopify.com https://shopify.com; frame-ancestors 'none'; style-src https://*.shopify.com https://*.googletagmanager.com https://fonts.googleapis.com https://heapanalytics.com https://assets.bounceexchange.com https://*.attn.tv https://*.klaviyo.com https://*.tecovas.com https://*.typekit.net https://*.evolv.ai https://widgets.juniphq.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src https://*.shopifysvc.com https://*.googleapis.com https://*.googletagmanager.com https://www.google-analytics.com https://www.google.com https://*.gstatic.com https://www.googleadservices.com https://www.facebook.com https://*.fbot.me https://ct.pinterest.com https://c.us.heap-api.com https://heapanalytics.com https://events.bouncex.net https://coupons.bounceexchange.com https://*.cdnwidget.com https://*.cdnbasket.net https://*.gladly.chat https://*.gladly.com https://*.gladly.qa
strict-transport-security: max-age=31536000