🌐 shop.com 429 🔒 SSL Valid
Checked: just now 🔗 Visit site
🔗
Also reached via: shop.app, shop.ca, shop.us, shop.xyz
HTTP Status ?A three-digit code showing if the site loaded successfully (200), redirects (301/302), or has errors (4xx/5xx).Read more →
429
SSL Expires ?When the SSL certificate expires. An expired certificate causes browser security warnings.Read more →
in 66d
Domain Expires ?When the domain registration expires. If not renewed, the domain becomes available to others.Read more →
in 2782d
Hosting ?The company and location where this website's server is physically located.Read more →
Unknown
Security ?Score based on key HTTP security headers: HSTS, Content-Security-Policy, and X-Frame-Options.Read more →
2/3
IP Address ?The numerical address of the server hosting this website. Reveals location, provider, and network.Read more →
23.227.39.20
Performance ?Lighthouse performance score from Google PageSpeed Insights (0–100). Measures real-world loading speed, interactivity and visual stability.
N/A
Uptime
N/A
⚡ Performance ?Lighthouse performance score from Google PageSpeed Insights (0–100). Measures real-world loading speed, interactivity and visual stability.
▼

Performance data not available yet.

🛠️ Tech Stack ?Technologies detected on this website: CMS, frameworks, libraries, CDN, and analytics tools. 1
▼
🌐 CDN
Cloudflare
📸 Screenshot Processing...
▼
⏳

Screenshot is being captured...

🌐 DNS Records ?DNS translates domain names to IP addresses. Records control where the site, email, and services are directed.Read more →
▼
A (IPv4)23.227.39.20
AAAA (IPv6)2620:127:f00e:ff00::
NSblue.foundationdns.orgblue.foundationdns.comblue.foundationdns.net
MX1 smtp.google.com
TXT (4)
Services configured via TXT:
Facebook / Meta Google
+1 other TXT record(s)
Show all TXT records
v=spf1 include:spf.marketamerica.com include:spf.protection.outlook.com include:spf.mandrillapp.com include:servers.mcsv.net include:spf.maropost.com ~all
facebook-domain-verification=hii4r8vtc86241r4lpf874f26h170g
google-site-verification=n7ZOe1vmZIkmrxdsvA3Xt5VUgWACnik2njEjZcjITok
shopify-verification-code=GZJiae8sKkB6Fxa6yTRtcZ1derEibt
📋 WHOIS / RDAP ?Public registration data: who registered the domain, when, and when it expires.Read more →
▼
RegistrarMarkMonitor Inc.
Registered1994-06-02
Expires2034-06-01 (in 2782 days)
Last Updated2026-09-24
Statusclient delete prohibitedclient transfer prohibitedclient update prohibited
🔒 SSL Certificate ?Encrypts the connection between browsers and this website. Valid SSL = HTTPS works.Read more → Valid
▼
Subject (CN)shop.com
IssuerGoogle Trust Services
Valid From2026-09-25
Valid Until2026-12-24 (66 days left)
SANs (1)shop.com
📡 HTTP Headers ?Metadata sent by the server: reveals software, caching rules, and security configuration.Read more →
▼
Status429
Servercloudflare
Content-Typetext/html; charset=utf-8
Final URLhttps://shop.com/
strict-transport-securitymax-age=15552000; includeSubDomains; preload
content-security-policydefault-src 'self'; script-src 'nonce-0fce98be081829b9d6a862c77fb0cd26' 'strict-dynamic' 'unsafe-eval' blob: 'report-sample' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' blob: cdn.shopify.com shopify-assets.shopifycdn.com sdks.shopifycdn.com https://cdn.shopify.com https://shopify-assets.shopifycdn.com https://cdn.shopifycloud.com https://hcaptcha.com https://*.hcaptcha.com https://*.googleapis.com; media-src 'self' blob: data: cdn.shopify.com shopify-assets.shopifycdn.com proxy.shopifycdn.com fast.wistia.com embed-ssl.wistia.com; img-src 'self' data: blob: https: cdn.shopify.com shopify-assets.shopifycdn.com proxy.shopifycdn.com sdks.shopifycdn.com shopify-arrive.s3.amazonaws.com storage.googleapis.com v.shopify.com; child-src blob: merchant-feedback.shopify.com; worker-src 'self' blob:; font-src 'self' https: data: https://cdn.shopify.com https://shopify-assets.shopifycdn.com https://cdn.shopifycloud.com; connect-src 'self' wss: wss://web-shop-client.shop.dev https: https://cdn.shopify.com https://shopify-assets.shopifycdn.com data:; object-src 'none'; upgrade-insecure-requests; frame-ancestors 'none'; frame-src 'self' https://www.facebook.com https://www.google.com/recaptcha https://recaptcha.google.com/recaptcha https://www.googletagmanager.com https://td.doubleclick.net https://shop.app https://server.shop.app https://www.youtube.com https://www.youtube-nocookie.com https://app.datadoghq.com https://lookerstudio.google.com/ https://js.stripe.com https://hooks.stripe.com https://www.sandbox.paypal.com https://www.paypal.com https://t.paypal.com https://www.paypalobjects.com https://c.paypal.com https://uri.paypal.com https://centinelapi.cardinalcommerce.com https://client.cardinaltrusted.com https://*.shopifycs.com https://*.shopifyinc.com https://*.pci.shopifyinc.com https://pay.shopify.com https://checkout.pci.shopifyinc.com/ https://www.affirm.com https://api.global.sandbox.affirm.com https://uk.affirm.com https://sandbox.uk.affirm.com https://au.affirm.com https://au.sandbox.affirm.com https://cdn1-sandbox.affirm.com https://www.google.com https://recaptcha.google.com https://hcaptcha.com https://*.hcaptcha.com https://*.myshopify.com https://checkout.shopify.com ; report-uri https://security-reports.shopifysvc.com/csp-report?source%5Bapp%5D=shop_client_web&policy_id=post-script-src-rollout; report-to security-policy
x-content-type-optionsnosniff
cf-raya4cdbc45ac6f800b-IAD
Security headers ?HTTP headers that protect visitors from attacks. HSTS forces HTTPS, CSP controls resource loading, X-Frame-Options prevents clickjacking.Read more →
HSTS
Content-Security-Policy
X-Frame-Options
🏠 Hosting ?Physical infrastructure: where the server is, who operates it, and what network it belongs to.Read more →
▼
IP Address23.227.39.20
ProviderUnknown
OrganizationN/A
ASNN/A
LocationN/A
🛡️ Security Score C (4/7)
▼
Valid SSL
HSTS
CSP
X-Frame-Options
X-Content-Type
Referrer-Policy
Permissions-Policy
🗺️ Sitemap & Robots
▼
Partially restricted
Some areas are hidden from crawlers, but the main content stays open to search engines.
Areas hidden from crawlers:
🛒 Cart & checkout 3 📁 Other paths 17
Show raw disallow rules (20)
/bag
/cart
/download/
/download-shop-ai
/explore
/home-feed
/interstitial/bag
/interstitial/offers
/offers-compact
/opt-out/confirm
/shop-cash/boosted-shops
/track/
/tracking-number/
/u/download
/u/notifications
/u/order-import
/u/settings
/*?*shpxid=*
/checkout/
/pay/authorize
… list truncated
Sitemap Found 6 pages
🔗 Social & Meta Tags Missing
▼
📧 Mail Security ?Email authentication records (SPF & DMARC) that prevent spoofing and phishing from this domain.Read more →
▼
SPF✓ Present
v=spf1 include:spf.marketamerica.com include:spf.protection.outlook.com include:spf.mandrillapp.com include:servers.mcsv.net include:spf.maropost.com ~all
DMARC✓ Present
v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:[email protected];ruf=mailto:[email protected]
MX Records
1 → smtp.google.com
🌍 Other TLDs ?Other top-level domain variants of this domain name and their availability. 19 active 4 for sale
▼
.com current
.net ●
.org ●
.info ●
.io ●
.co ●
.dev ●
.app ●
.me taken
.biz ●
.eu ●
.xyz ●
.fi ●
.se ●
.de ●
.uk ●
.fr taken
.nl ●
.es ●
.it taken
.us ●
.ca ●
.com.au taken
.co.uk ●
📡 Uptime Monitor
▼

Not checked yet — data will appear after the first monitoring run.