boyerplanning.co.uk
HTML metadata
Technology
- Server
- nginx
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- OneTrust
- Fonts
-
- Google Fonts
Third-party hosts loaded (5)
- cdn.jsdelivr.net×2
- cdn-ukwest.onetrust.com×1
- fonts.googleapis.com×1
- js.hsforms.net×1
- www.googletagmanager.com×1
Social
Contact
Registration
- Registrar
- 123-Reg Limited t/a 123-reg
- Created
- 2000-09-06
- Expires
- 2029-09-06 1204 days left
- Updated
- 2024-08-20
- Name servers
-
- ns65.domaincontrol.com.
- ns66.domaincontrol.com.
DNS records live
- NS
-
- ns65.domaincontrol.com
- ns66.domaincontrol.com
- MX
-
- 0 boyerplanning-co-uk.mail.protection.outlook.com
- TXT
-
Show 6 TXT records
access-domain-verification=4084352123f190a30a66bacc238bf1c458bf9f844ff1311acd712587a2edbf71e2u+PhfbNbV5XCpNToewCaU6TUoHY8ebjY+sDzd0rF4DKPKKQClbvkuvrAgqJwRXeKhNyor3VfkDsKCdJc29EA==7v4te8voon6hrtjhfckkls4dijdpnq5cnkugj8r8t6qoq20ebm7g=-=[ boyer planning ]=-=62lD/T4DAePV0g50VX9/+gwry9/DjeiHftWOssvCEyAxXYm38zZgc+pJ1jsxOpo/fnyN074Szr3exc8wRIGT4w==
- Verified for
-
- Microsoft 365
- Zoom
Email authentication strong
- SPF
-
v=spf1 include:_u.boyerplanning.co.uk._spf.smart.ondmarc.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:2ba62bc7@inbox.ondmarc.com,mailto:24c065a4800f375@rep.dmarcanalyzer.com; ruf=mailto:2ba62bc7@inbox.ondmarc.com,mailto:24c065a4800f375@for.dmarcanalyzer.com; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600policy: reject (enforced) · sp=reject - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOWRIpRhVoAjjqXJSyl9pmOz3ynMNYR+eMgmbtEojdWUus/hcgrueK+UJ1tSzKUgmgMrbx7dv3HwFr…
selectors probed - selector1:
Certificate (current)
Go Daddy Secure Certificate Authority - G2
Expires in 94 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
sameorigin- permissions-policy
geolocation=(self), microphone=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.hsforms.com *.hubspot.com inform.dataloft.co.uk googleads.g.doubleclick.net *.vimeo.com youtu.be *.clarity.ms cdn.cookielaw.org *.hsforms.net *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hsadspixel.net *.hubapi.com *.googleapis.com *.google.com *.onetrust.com *.google-analytics.com *.googletagmanager.com *.amazonaws.com api.mapbox.com *.jsdelivr.net *.gstatic.com *.gravatar.com *.postcodeanywhere.co.uk *.cloudflare.com *.youtube.com unpkg.com moneypennychat.appspot.com connect.facebook.net stats.g.doubleclick.net td.doubleclick.net 'unsafe-eval' 'unsafe-inline'; img-src 'self' * data: 'unsafe-inline'; font-src 'self' data: *.gstatic.com storage.googleapis.com; frame-ancestors 'self' *.somilestone.com- strict-transport-security
max-age=31536000; includeSubDomains; preload