Health
Yes, drunkelephant.com is reasonably trustworthy with a score of 77. While there are some warnings, most checks are positive.
Verisite checked drunkelephant.com on July 1, 2026 and gave it a trust score of 93/100. Out of 89 checks, 69 passed, with 10 warning(s) and 10 failed check(s).
93
/100
Trust Score
Excellent
Score incl. subdomains: 84/100
11
Passed
1
Warning
1
Failed
Security Headers
Checks HTTP security headers and cookie security configuration.
Security headers are well configured.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
No exposed sensitive files or directories found.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
Some potentially suspicious content patterns were found.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Valid SSL certificate found (expires 2026-10-14).
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
This domain has been registered since 2010-04-25.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
Tracking is present but a consent mechanism was detected.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Business data is well represented on the website.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
No reviews or trust seal found.
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
This domain was not found on any known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
No outdated or vulnerable software detected.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Email authentication is well configured with SPF, DKIM and/or DMARC.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Network configuration is secure and well optimized.
DNS & Server
Checks DNS records, server information and hosting details.
DNS records are properly configured.
Security Headers
Checks HTTP security headers and cookie security configuration.
73/100
Security headers are well configured.
- Domain
- drunkelephant.com
- Cookies
-
- Total: 12
- Issues: usid_drunkelephant_us: missing HttpOnly flag, sid: missing HttpOnly flag
- Secure cookies: 0
- Insecure cookies: 12
- HSTS max-age
- 63072000
- Missing headers
- Content-Security-Policy
- HSTS preload
- No
- Used browser fallback
- No
- Referrer-Policy
- Yes
- X-Frame-Options
- Yes
- HSTS includes subdomains
- Yes
- Permissions-Policy
- Yes
- X-Content-Type-Options
- Yes
- Content-Security-Policy
- No
- Strict-Transport-Security
- Yes
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
100/100
No outdated or vulnerable software detected.
- Detected CMS
-
- Name:
- Slug:
- Version:
- Detected: No
- Confidence: none
- Domain
- drunkelephant.com
- JavaScript libraries
-
- jQuery — 3.6.0
- Pages scanned
- 11
- Vulnerable libraries
- Server technology
-
- Server: cloudflare
- Powered by:
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
100/100
No exposed sensitive files or directories found.
- Domain
- drunkelephant.com
- Exposures
- Robots.txt analysis
-
- Exists: Yes
- Interesting paths:
- Paths checked
- 18
- Exposures found
- 0
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
78/100
Email authentication is well configured with SPF, DKIM and/or DMARC.
- SPF
-
- Exists: Yes
- Policy: hardfail
- Record: v=spf1 include:spf-00731301.pphosted.com include:spf-00731302.pphosted.com include:spf.protection.outlook.com include:spf.mandrillapp.com include:mail.zendesk.com include:shops.shopify.com include:spf.extole.io include:_spf.salesforce.com include:cust-spf.exacttarget.com a:production.emea.shiseido.demandware.net -all
- Mechanisms: include:spf-00731301.pphosted.com, include:spf-00731302.pphosted.com, include:spf.protection.outlook.com, include:spf.mandrillapp.com, include:mail.zendesk.com, include:shops.shopify.com, include:spf.extole.io, include:_spf.salesforce.com, include:cust-spf.exacttarget.com, a:production.emea.shiseido.demandware.net, all
- Policy label: checks.email_spf_hardfail
- Authorized senders: Proofpoint, Microsoft 365, Mandrill (Mailchimp), Zendesk, shops.shopify.com, spf.extole.io, Salesforce, cust-spf.exacttarget.com, Eigen servers
- DKIM
-
- Found: Yes
- Selectors: selector1, k1, s1, s2, selector2
- DMARC
-
- Exists: Yes
- Policy: none
- Record: v=DMARC1; p=none; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;
- Percentage:
- Policy label: checks.email_dmarc_none
- Has reporting: Yes
- Subdomain policy:
- Domain
- drunkelephant.com
- Authorized senders
- Proofpoint, Microsoft 365, Mandrill (Mailchimp), Zendesk, shops.shopify.com, spf.extole.io, Salesforce, cust-spf.exacttarget.com, Eigen servers
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
100/100
This domain has been registered since 2010-04-25.
- Domain
- drunkelephant.com
- Registrar
- CSC Corporate Domains, Inc.
- Registered
- 2010-04-25
- Age (days)
- 5911
- Expires
- 2027-04-25
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
96/100
Tracking is present but a consent mechanism was detected.
- Domain
- drunkelephant.com
- Detected trackers
- Google Tag Manager, Google Analytics
- Pages scanned
- 11
- Total cookies
- 10
- Third-party trackers found
- 2
- Consent platform
- OneTrust
- Tracking cookies
- Consent mechanism detected
- Yes
- Tracking cookies found
- 0
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
100/100
Network configuration is secure and well optimized.
- Domain
- drunkelephant.com
- Open ports
- HTTP version
- HTTP/2
- Mixed content domains
- Pages scanned
- 12
- Redirect chain
- http://drunkelephant.com, https://www.drunkelephant.com/
- HTTP/2 support
- Yes
- HTTP/3 support
- No
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 2
- HTTP redirects to HTTPS
- Yes
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
70/100
Some potentially suspicious content patterns were found.
- Domain
- drunkelephant.com
- Cryptominer scripts
- Pages scanned
- 9
- External form domains
- External script sources
- cdn.dynamicyield.com, cdn.cookielaw.org, js.squarecdn.com, cdn.attn.tv, shiseido.my.site.com, ui.powerreviews.com, static.ordergroove.com, cdn.cquotient.com, static.cloudflareinsights.com
- Obfuscation patterns
- 0
- Cryptominers detected
- 0
- Suspicious iframe details
-
- //www.googletagmanager.com/ns.html?id=GTM-592NMD4 — Hidden iframe
- //nojscontainer.pepperjam.com/1374183447.html — Hidden iframe
- //www.googletagmanager.com/ns.html?id=GTM-592NMD4 — Hidden iframe — /collections/best-sellers
- //nojscontainer.pepperjam.com/1374183447.html — Hidden iframe — /collections/best-sellers
- //www.googletagmanager.com/ns.html?id=GTM-592NMD4 — Hidden iframe — /collections/Sale
- //nojscontainer.pepperjam.com/1374183447.html — Hidden iframe — /collections/Sale
- //www.googletagmanager.com/ns.html?id=GTM-592NMD4 — Hidden iframe — /collections/skincare
- //nojscontainer.pepperjam.com/1374183447.html — Hidden iframe — /collections/skincare
- //www.googletagmanager.com/ns.html?id=GTM-592NMD4 — Hidden iframe — /collections/moisturizers
- //nojscontainer.pepperjam.com/1374183447.html — Hidden iframe — /collections/moisturizers
- //www.googletagmanager.com/ns.html?id=GTM-592NMD4 — Hidden iframe — /collections/serums
- //nojscontainer.pepperjam.com/1374183447.html — Hidden iframe — /collections/serums
- //www.googletagmanager.com/ns.html?id=GTM-592NMD4 — Hidden iframe — /collections/masks
- //nojscontainer.pepperjam.com/1374183447.html — Hidden iframe — /collections/masks
- //www.googletagmanager.com/ns.html?id=GTM-592NMD4 — Hidden iframe — /collections/cleansers
- //nojscontainer.pepperjam.com/1374183447.html — Hidden iframe — /collections/cleansers
- //www.googletagmanager.com/ns.html?id=GTM-592NMD4 — Hidden iframe — /collections/hair-collection
- //nojscontainer.pepperjam.com/1374183447.html — Hidden iframe — /collections/hair-collection
- External form targets
- 0
- Obfuscated code patterns
- External script domains
- 9
- Suspicious iframes
- 18
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
75/100
Business data is well represented on the website.
- Domain
- drunkelephant.com
- Email address present
- Yes
- Phone number present
- Yes
- Terms and conditions present
- Yes
- Chamber of Commerce number found
- No
- Terms and conditions page
- #
- VAT number found
- No
- Physical address present
- Yes
- Pages scanned
- 12
- Return policy present
- No
- Privacy policy present
- Yes
- Privacy policy page
- /privacy.html
- Contact details found
- 3
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
10/100
No reviews or trust seal found.
- Domain
- drunkelephant.com
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Review sources
- Trustpilot page
- https://www.trustpilot.com/review/drunkelephant.com
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
100/100
This domain was not found on any known fraud or phishing lists.
- Checked domain
- drunkelephant.com
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
90/100
Valid SSL certificate found (expires 2026-10-14).
- Expiry date
- 2026-10-14
- Issuer
- DigiCert Inc
- Subject
- *.drunkelephant.com
- Valid until
- 2026-10-15
- Valid from
- 2026-03-30
- TLS version
- TLSv1.2
- Serial number
- 0603B018B04806DD059A4DB485577E7E
DNS & Server
Checks DNS records, server information and hosting details.
90/100
DNS records are properly configured.
- IP Address
- 172.64.146.40
- SPF record
- Yes
- IPv6 support
- No
- DMARC record
- Yes
- DNSSEC
- No
- MX Records
- mxa-00731301.gslb.pphosted.com, mxb-00731301.gslb.pphosted.com
- Nameservers
- dns2.cscdns.net, dns1.cscdns.net
- IP Addresses
- 172.64.146.40
- IPv6 Addresses
Discovered subdomains (3)
About this website
Drunk Elephant is a brand focused on biocompatible skincare. They are committed to using only ingredients that benefit skin health while avoiding six ingredients they believe are at the root of most skin issues. Their motto, #drunkbreak, encourages users to completely remove these ingredients from their routine for healthier skin.
The website drunkelephant.com has several key facts, such as an approved SSL certificate (score 90) and a privacy score of 96. However, there are also some points of concern, such as an error in security headers (score 0) and a low review score (score 10).
What our scores mean for you
The error in security headers means that the safety of your data cannot be fully guaranteed, which could lead to unknown risks. The warnings regarding technology and content security indicate that there are partial issues that may affect trust in the site. The low review score points to a concrete risk for users, suggesting that there may be negative experiences that have not been adequately addressed.
What this means
Verisite is an independent platform that runs automated trust checks on websites. For visitors, this means that while drunkelephant.com appears generally trustworthy, there are some risks to be aware of. For the company itself, this score indicates that there is room for improvement, particularly in customer feedback and security.
Frequently asked questions
Does drunkelephant.com have a valid SSL certificate?
Yes, drunkelephant.com has a valid SSL certificate.
Has drunkelephant.com ever been reported for fraud?
No external red flags or evidence of fraud have been found.
Why is the review score so low?
The low review score (score 10) indicates negative user experiences.
What are the risks of using drunkelephant.com?
The risks include uncertain security and potential negative customer feedback.
Is there a privacy policy on drunkelephant.com?
Yes, the privacy score is 96, indicating that the policy is generally good.
What are the main concerns about this site?
Key concerns include the error in security headers and the low review score.