builtfortrades.co.uk

HTML metadata

Title: BUILT | Websites & Local Search for Trades
Description: Websites that win you work. BUILT helps tradespeople look the part, win better work, and charge what they're worth. 10 years. 800+ trades. Real results.
Language: en
Canonical: https://www.builtfortrades.co.uk/index

Open Graph

url: https://www.builtfortrades.co.uk
title: BUILT | Websites & Local Search for Trades
locale: en_GB
site name: BUILT
description: Websites that win you work. BUILT helps tradespeople look the part, win better work, and charge what they're worth. 10 years. 800+ trades. Real results.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Ads

Meta Pixel

Third-party hosts loaded (4)

www.google.com×2
www.googletagmanager.com×2
connect.facebook.net×1
www.facebook.com×1

Contact

Email

hello@builtfortrades.co.uk

Phone

01218160116

Registration

Registrar

GoDaddy.com, LLC.

Created

2021-11-19

Expires

2026-11-19 182 days left

Updated

2025-11-20

Name servers

ns71.domaincontrol.com.
ns72.domaincontrol.com.

DNS records live

NS

ns71.domaincontrol.com
ns72.domaincontrol.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

2
mandrill_verify.CzQ7EoeWdP_ZbkVlQ86sbQ

Verified for

Google
Meta

Email authentication strong

SPF

v=spf1 include:_spf.mailersend.net include:dc-aa8e722993._spfm.builtfortrades.co.uk ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc-reports@builtfortrades.co.uk

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+xiyBoxyRBBZe4Cy2JtTlq+9bWKFUm158vmrVSEvdDTspBYL9yx1KYSP+3ar3HO6BMXmdmHX9ze9M…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R13

from 2026-04-08 to 2026-07-07

Expires in 47 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.builtfortrades.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://img.youtube.com https://*.public.blob.vercel-storage.com https://image.mux.com https://www.facebook.com https://connect.facebook.net https://www.google-analytics.com https://*.googletagmanager.com https://www.google.com https://*.gstatic.com https://*.clarity.ms; font-src 'self'; media-src 'self' blob: https://stream.mux.com; worker-src 'self' blob:; frame-src https://www.youtube.com https://www.facebook.com https://www.googletagmanager.com; connect-src 'self' https://*.mux.com https://*.litix.io https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://*.clarity.ms https://www.facebook.com https://connect.facebook.net https://widget.manychat.com https://diffuser-cdn.app-us1.com https://*.app-us1.com; object-src 'none'; base-uri 'self'; form-action 'self'
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin

Links to (1)

wa.me×2

Linked from (1)

monument-tools.com×2