ugg.com
HTML metadata
Technology
- CDN
- Cloudflare
- Analytics
-
- Cloudflare Insights
- Cookie consent
-
- Osano
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (14)
- cdn.dynamicyield.com×4
- sitegenesis.production.deckers.coremedia.cloud×4
- rcom.dynamicyield.com×2
- st.dynamicyield.com×2
- use.typekit.net×2
- cdn.attn.tv×1
- cdn.cquotient.com×1
- cmp.osano.com×1
- collect.tealiumiq.com×1
- dms.deckers.com×1
- js.datadome.co×1
- res.cloudinary.com×1
- static.cloudflareinsights.com×1
- tags.tiqcdn.com×1
Social
Registration
- Registrar
- MarkMonitor Inc.
- Created
- 1997-09-25
- Expires
- 2026-09-24 127 days left
- Updated
- 2025-08-23
- Name servers
-
- edns3.ultradns.biz
- edns3.ultradns.com
- edns3.ultradns.net
- edns3.ultradns.org
- ns10.ultradns2.com
- ns10.ultradns2.org
DNS records live
- NS
-
- edns3.ultradns.biz
- edns3.ultradns.com
- edns3.ultradns.net
- edns3.ultradns.org
- ns10.ultradns2.com
- ns10.ultradns2.org
- MX
-
- 10 mxa-00352c01.gslb.pphosted.com
- 10 mxb-00352c01.gslb.pphosted.com
- TXT
-
Show 10 TXT records
openai-domain-verification=dv-zyZWqJAnOC52Nj0vfFsERzuvrovag_verification_token=CC91A63F24414C5C93D1F26A0D46E477facebook-domain-verification=ktent2jcf1lf62ekphh8211qcwsecsgoogle-site-verification=2nDG5fEd00j_diDt_ljtMDiYKq8-fIkHYtVP4CRUhWk72e2ec42199541ed8bd0b97310522797_87km4hcb6fuidr4y78rk3ymp2xzx2u4_l252whqii9o0y1ghwoop4nmg6wem5u6klaviyo-site-verification=RWHgpBklaviyo-site-verification=SkjhYrlucid-verification=<fmt9gwezymu1a08s33ju>
Email authentication strong
- SPF
-
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.compolicy: reject (enforced) - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NErJp03A71twiMOpkohUSq7/hIHY5dhNquF6D6ml/JoXHOPSJWIXVBmO9j96BPyCKcd2vYRo/gDk1… - k1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJ5CBNnsRSjOYOxiIRxyPmYbNoDHPCnLJpKVxFXTOT69T/fPy//t8U9loHR9pi8lwyWuGst1CarMx+WX62Ei… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - default:
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 48 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- content-security-policy
default-src blob: data: ws: 'unsafe-inline' 'unsafe-eval' *.ugg.com dms.deckers.com *.demandware.net *.commercecloud.salesforce.com *.sandbox.us01.dx.commercecloud.salesforce.com via.placeholder.com *.deckers.layer0-perma.link *.cquotient.com d.emails.teva.com email.ugg.com email.hoka.com email.koolaburra.com email.sanuk.com email.teva.com *.emails.teva.com blog.ugg.com events.hoka.com *.hokaoneone.com *.hokaoneone.eu *.hokaoneone.jp blog.uggaustralia.com www.teva-eu.com scripts.deckers.com rum.ingress.edgio.net *.g.doubleclick.net edgeshoppingstatic.azureedge.net s.retargeted.co *.joinhoney.com d3nocrch4qti4v.cloudfront.net df45ay5pw60dy.cloudfront.net *.arcot.com api.v2.sprocket.bz *.sprocket.bz sprocket-ping.s3.amazonaws.com assets.v2.sprocket.bz assets.sprocket.bz cx.atdmt.com cdn.optimizely.com *.bglobale.com *.formstack.com rum.browser-intake-datadoghq.com *.deckers.coremedia.cloud rum-http-intake.logs.datadoghq.com browser-intake-datadoghq.com www.datadoghq-browser-agent.com rum- strict-transport-security
max-age=63072000; includeSubDomains; preload