bearscot.com

HTML metadata

Title

Home - BEAR Scotland

Description

BEAR Scotland is a leading road maintenance and management firm in Scotland.

Language

en-GB

Generator

WP Rocket 3.19.4

Canonical

https://www.bearscot.com/

Feeds

BEAR Scotland Feed RSS

Open Graph

url: https://www.bearscot.com/
title: Home - BEAR Scotland
locale: en_GB
site name: BEAR Scotland
description: BEAR Scotland is a leading road maintenance and management firm in Scotland.

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

ajax.googleapis.com×1
cdnjs.cloudflare.com×1
fonts.gstatic.com×1
pbs.twimg.com×1
www.googletagmanager.com×1

Social

Contact

Phone

2024-05-21 11

Registration

Registrar

IONOS SE

Created

2000-12-15

Expires

2026-12-15 210 days left

Updated

2025-11-15

Name servers

cruz.ns.cloudflare.com
luke.ns.cloudflare.com

DNS records live

NS

cruz.ns.cloudflare.com
luke.ns.cloudflare.com

MX

5 mailserver.bearscot.com

Email authentication strong

SPF

v=spf1 include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:306964898e56593@rep.dmarcanalyzer.com; ruf=mailto:306964898e56593@for.dmarcanalyzer.com; fo=1;

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tZsRv4potN8Pi/JDAHcmAoQQBNiR0jQ1gvIYiXLdUIBYd2T5TR29ah6tckhkkzKtE87PJqGPdsCFXhyGL…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaMK9sT/IvBhYgzO7eubOAntNV1FXpv+TJ07Ru4hwqxNq3+choCEQS7c5Qofso84d8lljxq0k/iiDW9V6A…

selectors probed

Certificate (current)

R12

from 2026-04-04 to 2026-07-03

Expires in 45 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.bearscot.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: compute-pressure=(), geolocation=(self), microphone=(), camera=(), fullscreen=*, picture-in-picture=*, payment=(), autoplay=*, interest-cohort=(), sync-xhr=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://*.maps.googleapis.com; style-src 'self' 'unsafe-inline' https: https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https: https://fonts.gstatic.com; connect-src 'self' https: https://*.google-analytics.com https://*.googletagmanager.com; frame-src 'self' data: https://*.googletagmanager.com/ https://*.youtube.com https://maps.acpltd.co.uk/ https://*.youtube-nocookie.com https://player.vimeo.com https://maphub.net https://*.google.com https://*.maps.google.com; child-src 'self' data: https://*.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com https://maphub.net https://*.google.com https://*.maps.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self';
strict-transport-security: max-age=31536000; includeSubDomains; preload