totalcarparts.com

.com crawl

First seen 2026-05-21 · Last seen 2026-05-30 · ok HTTP/1.1 200 712 ms crawled 2026-05-27

US · 172.67.154.204 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Totalcarparts
Description
Totalcarparts is de website voor uw auto onderdelen, tuning, wieldoppen, xenon, uitlaatsierstukken maar ook technische onderdelen. Alles gratis verzonden!
Language
nl

Technology

CDN
Cloudflare
CMS
Gatsby
Analytics
  • Google Tag Manager

Third-party hosts loaded (1)

  • www.googletagmanager.com×1

Contact

Phone

Registration

Registrar
Key-Systems GmbH
Created
2008-07-25
Expires
2026-07-25 54 days left
Updated
2025-11-28
Name servers
  • alina.ns.cloudflare.com
  • casey.ns.cloudflare.com

DNS records live

NS
  • alina.ns.cloudflare.com
  • casey.ns.cloudflare.com
MX
Show 7 MX records
  • 10 aspmx.l.google.com
  • 20 alt1.aspmx.l.google.com
  • 30 alt2.aspmx.l.google.com
  • 40 aspmx2.googlemail.com
  • 50 aspmx3.googlemail.com
  • 60 aspmx4.googlemail.com
  • 70 aspmx5.googlemail.com
Verified for
  • Google

Email authentication weak

SPF
v=spf1 a mx ip4:37.97.142.105 include:spf.magehost.pro include:spf.magehost.pro ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-23 to 2026-07-22
Expires in 52 days

HTTP security headers

Header hygiene 50/100 Checked live page: https://totalcarparts.com/

present
  • content-security-policy-report-only
  • x-frame-options
  • x-content-type-options
findings
  • missing HSTS
  • missing Content Security Policy
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy-report-only
font-src data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src 'self' 'unsafe-inline'; img-src data: 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';

Links to (30)

Linked from (26)