bigislandcoffeeroasters.com
BBig Island Coffee Roasters | Award-Winning Hawaiian & Kona Coffee
Shop fresh-roasted Hawaiian coffee from Hawaii's most awarded craft roaster. 100% Kona coffee, Hawaii espresso, Kau coffee, Kona Peaberry & more. Free Shipping on orders over $98
Built with
- E-commerce
- Shopify
Also detected
- Libraries
- Tailwind CSS · jQuery
- Infrastructure
- Cloudflare
- Third-party services
- Klaviyo
Overview
- Status
- alive
- Registered
- 2011-10-22 (15 years ago)
- First seen here
- 2026-09-22
- Security grade
- B (80/100, from headers & TLS)
- Privacy score
- 12/100 (9 third-party script hosts, 1 tracking/marketing services)
- Hosting
- Cloudflare, Inc. · AS13335 · Canada
- Server header
cloudflare- Response time
- 345 ms to first byte, measured from our crawler
- TLS certificate
- Google Trust Services · TLSv1.3 · expires 2026-10-29
- Language
- en
- Mobile-ready
- yes (viewport meta tag)
- Structured data
- Organization · WebSite
- Linked to from
- 10 other sites seen so far
Loads scripts from
Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.
googleapis.comshop.appshopify.comattn.tvklaviyo.comreamaze.comjsdelivr.netamazonaws.comstamped.io
What to fix
- Add a Referrer-Policy
Header: Referrer-Policy: strict-origin-when-cross-origin - Mark cookies Secure and HttpOnly
At least one cookie is sent without these flags, exposing it to interception or scripts.
Security & email signals
- ✓ HTTPS
- ✓ HSTS
- ✓ Content-Security-Policy
- ✓ X-Content-Type-Options
- ✓ X-Frame-Options
- ✗ Referrer-Policy
- ✗ Permissions-Policy
- ✓ SPF record
- ✓ DMARC record
- ✗ DKIM record
- ✗ Cookies set securely
- ✓ Has real content (not an empty shell)
- ✓ Valid TLS certificate
Badge
Show this site's security grade in a README or footer:

<a href="https://webtelemetry.dev/site/bigislandcoffeeroasters.com"><img src="https://webtelemetry.dev/badge/bigislandcoffeeroasters.com.svg" alt="Security grade"></a>
Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.