zingermans.com

.com crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 11385 ms crawled 2026-05-17

US · 40.88.21.58 · AS8075 Microsoft Corporation

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Zingerman's: Online Shopping for Food and Gifts
Description
Ship great food anywhere in America from Zingerman’s Mail Order. Gift boxes of bread, cheese, meat, pastry and more. You really can taste the difference.
Language
en

Technology

Server
Microsoft-IIS
Analytics
  • Google Analytics
  • Google Tag Manager
Cookie consent
  • Osano
Fonts
  • Adobe Fonts
  • Google Fonts
Third-party hosts loaded (14)
  • maxcdn.bootstrapcdn.com×4
  • cdn.searchspring.net×3
  • fonts.googleapis.com×3
  • use.typekit.net×3
  • www.googletagmanager.com×3
  • cdnjs.cloudflare.com×2
  • www.zingermanscommunity.com×2
  • ajax.googleapis.com×1
  • cmp.osano.com×1
  • fast.wistia.net×1
  • ssl.google-analytics.com×1
  • www.dwin1.com×1
  • www.googleoptimize.com×1
  • zcobbar.zingermanscommunity.com×1

Social

Contact

Email
Phone
Address
st a catalogYour privacy choicesBusiness Gifts866.260.6169

Registration

Registrar
Wild West Domains, LLC
Created
1997-05-22
Expires
2028-05-23 734 days left
Updated
2023-05-15
Name servers
  • pdns01.domaincontrol.com
  • pdns02.domaincontrol.com

DNS records live

NS
  • pdns01.domaincontrol.com
  • pdns02.domaincontrol.com
MX
Show 7 MX records
  • 10 aspmx.l.google.com
  • 20 alt1.aspmx.l.google.com
  • 20 alt2.aspmx.l.google.com
  • 30 aspmx2.googlemail.com
  • 30 aspmx3.googlemail.com
  • 30 aspmx4.googlemail.com
  • 30 aspmx5.googlemail.com
TXT
Show 4 TXT records
  • apple-domain-verification=MKwt5ZWeeHnBFoWi
  • google-site-verification=OB6hMmvQb0bHu4CLBUQhQm1xt_jT1w2a9P7Gj3W1oN0
  • google-site-verification=VqxlRP5yWMQVGEWBWEjRhTBg4K47yu8NUeueuQ7bMcs
  • google-site-verification=ru4sN8iW2EcstaBo0cbqgvLTSEUUeFQS0s4_X3GsZb4

Email authentication partial

SPF
v=spf1 redirect=zingermans.com.hosted.spf-report.com
no all qualifier
DMARC
v=DMARC1; p=none; rua=mailto:ef06b2b6@mxtoolbox.dmarc-report.com; ruf=mailto:ef06b2b6@forensics.dmarc-report.com; adkim=r; aspf=r; pct=100
policy: none (monitoring only)
DKIM
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCAy0wQY+gFqEjmlMWs1L74LDMwyREIOyMkz4d3aLQ6ldZYZr1ZQSHZolSulcCRN+zRAEf/DLTIGfs+mh3Woy…
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
  • smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36
from 2025-08-22 to 2026-09-23
Expires in 126 days

HTTP security headers

Header hygiene 70/100 Checked live page: https://zingermans.com/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; frame-ancestors 'self' https://*.zingermans.com https://*.authorize.net;
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (2)

Linked from (4)