toyhubusa.com

.com crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 862 ms crawled 2026-05-18

CA · 23.227.38.65 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Male Sex Toys | The Store Built for Him | ToyHubUSA
Description: ToyHubUSA is built for men. Shop male sex toys, masturbators, prostate massagers, cock rings, and more. Plain box. No brand name. Ships fast and discreetly.
Language: en
Canonical: https://toyhubusa.com/

Open Graph

url: https://toyhubusa.com/
title: Male Sex Toys | The Store Built for Him | ToyHubUSA
site name: ToyHubUSA
description: ToyHubUSA is built for men. Shop male sex toys, masturbators, prostate massagers, cock rings, and more. Plain box. No brand name. Ships fast and discreetly.

Technology

CDN: Cloudflare
CMS: Shopify

Analytics

Google Tag Manager

Third-party hosts loaded (11)

cdn.shopify.com×8
shop.app×2
unpkg.com×2
ajax.googleapis.com×1
fonts.shopifycdn.com×1
maps.googleapis.com×1
maps.gstatic.com×1
monorail-edge.shopifysvc.com×1
onsite.optimonk.com×1
productreviews.shopifycdn.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

NameCheap, Inc.

Created

2019-12-31

Expires

2026-12-31 224 days left

Updated

2025-12-01

Name servers

dns1.registrar-servers.com
dns2.registrar-servers.com

DNS records live

NS

dns1.registrar-servers.com
dns2.registrar-servers.com

MX

10 mx1.privateemail.com
10 mx2.privateemail.com

TXT

klaviyo-site-verification=TaaZeL

Verified for

Google

Email authentication weak

SPF

v=spf1 include:spf.privateemail.com ~all

softfail (~all)

DMARC

not published

DKIM

default: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uErdRvq1ImmE++pWCimojVzwSGsyFHkwxny0yWMFIIOpZSd74GS0oxpm0GM3c8xRhFJvaejPtPnxBTG…

selectors probed

Certificate (current)

from 2026-04-01 to 2026-06-30

Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://toyhubusa.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security: max-age=7889238