bromford.co.uk
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- ajax.googleapis.com×1
- code.jquery.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- GoDaddy.com, LLC.
- Created
- 1998-08-04
- Expires
- 2026-08-04 76 days left
- Updated
- 2024-08-05
- Name servers
-
- ns03.domaincontrol.com.
- ns04.domaincontrol.com.
DNS records live
- NS
-
- ns03.domaincontrol.com
- ns04.domaincontrol.com
- MX
-
- 0 bromford-co-uk.mail.protection.outlook.com
- TXT
-
Show 12 TXT records
MS=ms37034723ddosx-site-verification=bc6f4b6d4ecc87133f8a6b8ed33af72e12dff52c1205af041a1b9deaef8076a7dg11+lgVVNVsxLdw/snM5XRbWb/PvZcJkWlJa2VNMiHcvMVUhxLaC6+j9/kjWzz9lRhTp3f1LCPbDn55pkP67g==9u0u2pge2tfukvivr6e5j683foBCOM=DELlucid-verification=vba!kbt6dbn3ANU_vqngoogle-site-verification=y8BzNrPAtKNujSNFdIxmQtpoofkGi360L9A-h-bCmM8apple-domain-verification=z3Au5AmVF7FKj6jMclio-domain-verification=9cf67cd4b0e4f2fa8ebdaeeaec5b319agoogle-site-verification=fMSoqPczWsx8ZW7G59sKdwfvvpAKexpgYz9V1ccLxeY0ed1fe018a04638b77da0d485d8efa28e7f1223a00v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 168 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
script-src *.civiccomputing.com *.clarity.ms *.google-analytics.com *.onetrust.com ajax.googleapis.com apps.euw2.pure.cloud cdnjs.cloudflare.com code.jquery.com connect.facebook.net form.jotform.com live-chat-assets.socialsignin.net live-chat-cdn.orlo.app maps.google.com maps.googleapis.com 'self' siteimproveanalytics.com snap.licdn.com static.hotjar.com 'unsafe-inline' www.clarity.ms www.facebook.com www.googletagmanager.com www.youtube.com;connect-src *.civiccomputing.com *.clarity.ms *.cloudfunctions.net *.firebaseapp.com *.firebaseio.com *.google.com *.google-analytics.com *.linkedin.com *.onetrust.com *.themediapeople.co.uk apps.euw2.pure.cloud content.hotjar.io googleads.g.doubleclick.net https://api.euw2.pure.cloud https://api-cdn.euw2.pure.cloud https://fileupload.euw2.pure.cloud maps.googleapis.com 'self' surveystats.hotjar.io wss://*.euw2.pure.cloud wss://s-usc1a-nss-2050.firebaseio.com wss://ws.hotjar.com;script-src-elem *.clarity.ms *.firebaseio.com *.google.com *.onetrust.- strict-transport-security
max-age=63072000; includeSubDomains; preload