4groupci.com
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (7)
- ajax.googleapis.com×1
- dc.ads.linkedin.com×1
- js.createsend1.com×1
- translate.google.com×1
- use.typekit.net×1
- www.facebook.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
Registration
- Registrar
- 123-Reg Limited
- Created
- 2014-05-28
- Expires
- 2030-05-28 1469 days left
- Updated
- 2025-05-20
- Name servers
-
- ns-1152.awsdns-16.org
- ns-151.awsdns-18.com
- ns-1712.awsdns-22.co.uk
- ns-964.awsdns-56.net
DNS records live
- NS
-
- ns-1152.awsdns-16.org
- ns-151.awsdns-18.com
- ns-1712.awsdns-22.co.uk
- ns-964.awsdns-56.net
- MX
-
- 0 4groupci-com.mail.protection.outlook.com
- 50 mx1.4hire.je
Email authentication partial
- SPF
-
v=spf1 ip4:212.9.29.84 include:spf.protection.outlook.com include:_spf.createsend.com include:amazonses.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 77 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src https: data: 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.fonts.net *.createsend1.com google.com *.google.com *.googleapis.com gstatic.com *.gstatic.com cdn.3cx.com *.vimeo.com *.bunny.net webreality.co.uk snap.licdn.com use.typekit.net/tsk2hez.js cdnjs.cloudflare.com www.gstatic.com connect.facebook.net *.cookiescan.com *.userway.org 'nonce-b945f5c1a1ff4346905306d9b045a91f'; style-src 'self' 'unsafe-inline' *.fonts.net *.cloudfront.net *.typekit.net *.googleapis.com fonts.googleapis.com *.bunny.net *.gstatic.com *.cookiescan.com *.userway.org; img-src 'self' data: https: *.google-analytics.com google-analytics.com google-analytics.com *.umbraco.org gravatar.com *.gravatar.com gstatic.com *.gstatic.com i1.wp.com *.userway.org; connect-src 'self' *.analytics.google.com analytics.google.com *.google.com *.doubleclick.net https://*.cookiescan.com https://*.google-analytics.com cdnjs.cloudflare.com translate.googleapis.- strict-transport-security
max-age=31536000