watsons.com

HTML metadata

Title: Watson's | Furniture, Spa and Hot Tubs, Pool Supplies and More
Description: Watson's home leisure super store sells the highest quality indoor and outdoor furniture, hot tubs and spas, above ground pools and supplies, game room and pool tables. For those who love to entertain and be entertained, we’ve created a shopping experience unlike anywhere else. That’s why Life’s Best Moments Start Here.
Language: en
Canonical: https://www.watsons.com/

Technology

CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (5)

connect.podium.com×1
fonts.googleapis.com×1
tag.simpli.fi×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Contact

Phone

513-326-1100

Address

2721 E. Sharon RoadCincinnati, OH 45241

Registration

Registrar

Cloudflare, Inc.

Created

1997-06-22

Expires

2026-06-21 33 days left

Updated

2025-01-18

Name servers

chris.ns.cloudflare.com
june.ns.cloudflare.com

DNS records live

NS

chris.ns.cloudflare.com
june.ns.cloudflare.com

MX

10 watsons.com.1.0001.arsmtp.com
20 watsons.com.2.0001.arsmtp.com

TXT

Show 4 TXT records

facebook-domain-verification=cihcgye1f6rimez1kjgs3h3ygzhjda
google-site-verification=GBpH8O-22pZsv7aiHLzzm9UGuUNjEVwsgxHAUzKqTf4
_globalsign-domain-verification=6RYPIPUO2OQDU0pqaDmaEeWmISV7Tz3QQBCYgOv3br
apple-domain-verification=Lk7HhkW8gvdURq7e

Email authentication strong

SPF

v=spf1 include:appriver.com include:5117171.spf05.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@watsons.com; ruf=mailto:dmarc@watsons.com

policy: quarantine

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyebN6/jFWFT4lYdIAN/IzfjRQjpF0gX7CRyCcPOKCxw9cCq3RGS42aXtbHXWA7EGHy7pudP4BABCn1…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w6eQpkTmhsfp38/LSv37t/lCm7DK+x1LBf6X74IYaKDfsPXRCQysrPmyEt9tOGZi9lPCNN3n+B1uUM4jF…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AVEC4/+vILMoJ54zYflkyJa9RtDOOyXXYE0PVzZL+X48Pj31eXkRWfpLd+jqh1sYAz3xdrcc6XrKmxfKr…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

R13

from 2026-03-24 to 2026-06-22

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.watsons.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; upgrade-insecure-requests; frame-ancestors 'self' *.certcapture.com 'self'; form-action 'self' https://survey.g.doubleclick.net/ https://www.facebook.com/tr/ https://forms.hsforms.com/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inli
strict-transport-security: max-age=31536000

Links to (5)

Linked from (1)

sciotovalley.com×1