bibbyfinancialservices.com

HTML metadata

Title

Invoice Finance | Invoice Discounting | Invoice Factoring | Bibby FS

Description

Bibby Financial Services is the UK’s leading independent invoice finance specialist, currently providing cash flow funding for over 8,500 businesses.

Language

en-gb

Canonical

https://www.bibbyfinancialservices.com

Translations

en ×3
cs ×2
de ×2
fr ×2
nl ×2
pl ×2
sk ×2

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Google Tag Manager

Social widgets

Vimeo Embed

Third-party hosts loaded (12)

www.googletagmanager.com×3
cdn.contentstack.io×2
www.bibbyfactor.fr×2
www.bibbyfinancialservices.cz×2
www.bibbyfinancialservices.de×2
www.bibbyfinancialservices.nl×2
www.bibbyfinancialservices.pl×2
www.bibbyfinancialservices.sk×2
player.vimeo.com×1
widget.trustpilot.com×1
www.bibbyfinancialservices.ie×1
www.bibbyfinancialservices.sg×1

Social

Contact

Phone

0808 196 1692

Address

Bibby Financial Services Ltd, 3rd Floor, Walker House, Exchange Flags, L2 3YL, Liverpool, Merseyside, UK

Registration

Registrar

MarkMonitor Inc.

Created

2001-04-11

Expires

2028-04-11 691 days left

Updated

2026-03-10

Name servers

ns1.markmonitor.com
ns2.markmonitor.com
ns3.markmonitor.com
ns4.markmonitor.com
ns5.markmonitor.com
ns6.markmonitor.com
ns7.markmonitor.com

DNS records live

NS

ns1.markmonitor.com
ns2.markmonitor.com
ns3.markmonitor.com
ns4.markmonitor.com
ns5.markmonitor.com
ns6.markmonitor.com
ns7.markmonitor.com

MX

0 bibbyfinancialservices-com.mail.protection.outlook.com

TXT

TXT=q4n4nsneqd0heoqkd47dco2gda
xuc530KkodSracCe7Z/ys8wp1Mn2h8ebzSuPEZ3vY6GYPqyMZXWK0vnW52RaWDDfbXfcdWK+H0l3B75XrwjM4w==
msfpkey=6nqjldwjumstsayeo7ovsp9er

Verified for

Dynamics 365
Meta
Microsoft 365
OpenAI

Email authentication strong

SPF

v=spf1 ip4:148.59.101.16/28 ip4:18.168.51.200 ip4:18.168.140.58 ip4:52.155.223.73 ip4:52.146.156.35 include:spf.protection.outlook.com a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com include:spf.uk.exclaimer.net include:spfa.cpmails.com include:spf.zohomail360.eu -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; ruf=mailto:bfs@eu.cp-dmarc.com; rua=mailto:bfs@eu.cp-dmarc.com;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbZqKLnVjDbqkx3FwQXYzLEf4DRlyGQYdniyGWTRyfSU2oF55AG4tpDwOsQuCVqHqy2Agdf5PFbZUeX/+VZw…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66KMzDExKTcZrXDppfzWe9piYSoOZYuoyXZ2OmcNnTGkWDvnbfxPWVMZMt6N5BW7yxv2n5oehAsP/k…
s1: v=DKIM1; k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWEIcUewmErQLwAr70NIYxytMaADw5eimHM+TS6DaQ7Ow90w+bZgcMWUuryan1TKiUTi6dTdi…

selectors probed

Certificate (current)

Certainly Intermediate R1

from 2026-05-01 to 2026-05-31

Expires in 11 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.bibbyfinancialservices.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(), autoplay=*, fullscreen=*
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'strict-dynamic' https: 'nonce-U5EOwueJndzVEG/U59puqQ=='; style-src 'self' 'unsafe-inline' https:; img-src 'self' blob: data: https:; font-src 'self' https:; connect-src 'self' https: https://*.stackadapt.com; frame-src 'self' https://open.spotify.com https://player.vimeo.com https://secure-fra.livechatinc.com/ https://widget.trustpilot.com https://www.googletagmanager.com https://www.google.com https://www.youtube.com/ https://*.contentstack.com https://*.formstack.com https://cdn.openwidget.com/ https://*.lytics.io; frame-ancestors 'self' https://*.contentstack.com https://azure-eu-app.contentstack.com; object-src 'none'; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'
strict-transport-security: max-age=31536000; includeSubDomains; preload