baus.org.uk
HTML metadata
Technology
- Server
- C13
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- fonts.googleapis.com×2
- code.jquery.com×1
- fonts.gstatic.com×1
Social
Contact
Registration
- Registrar
- Claranet Limited t/a Claranet
- Created
- 2005-10-27
- Expires
- 2026-10-27 160 days left
- Updated
- 2025-10-17
- Name servers
-
- ns0.clara.net.
- ns1.clara.net.
- ns2.clara.net.
DNS records live
- NS
-
- ns0.clara.net
- ns1.clara.net
- MX
-
- 10 eu-smtp-inbound-1.mimecast.com
- 10 eu-smtp-inbound-2.mimecast.com
- TXT
-
MS=ms39866936MS=ms78792063MS=ms32197790
Email authentication strong
- SPF
-
v=spf1 redirect=_sjowa27s7.sdmarc.netno all qualifier - DMARC
-
v=DMARC1; p=reject; pct=100; ri=21600; fo=1; rua=mailto:a.jowa27s7@sdmarc.net; ruf=mailto:f.jowa27s7@sdmarc.netpolicy: reject (enforced) - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3CKD6cFZ/kLemhIytwyVmInsPX7r2pCBb8GnN5lT5BYTV4FxuCBgIZEGQNQcqdNnbn6SWcU7qaBVnK8Mm… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA145bmH9PtIpfo6y4h33k9J73loji7i7eLhyeJ8Dj8rG9DMDEvBnol9vkaf0NFUuoCUDrFma27HcJHAR8wS…
selectors probed - s1:
Certificate (current)
R12
Expires in 32 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=*, ambient-light-sensor=*, autoplay=*, battery=*, camera=*, cross-origin-isolated=*, display-capture=*, document-domain=*, encrypted-media=*, execution-while-not-rendered=*, execution-while-out-of-viewport=*, fullscreen=*, geolocation=*, gyroscope=*, keyboard-map=*, magnetometer=*, microphone=*, midi=*, navigation-override=*, payment=*, picture-in-picture=*, publickey-credentials-get=*, screen-wake-lock=*, sync-xhr=*, usb=*, web-share=*, xr-spatial-tracking=*- x-content-type-options
nosniff- content-security-policy
default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' blob:- strict-transport-security
max-age=31536000; includeSubDomains