checkmyfile.com

HTML metadata

Title: Checkmyfile | Credit score and most detailed credit report
Description: See your info from Experian, Equifax, and TransUnion in one place with the most detailed credit report you can get. Take steps to grow your credit score.
Language: en
Canonical: https://www.checkmyfile.com/

Open Graph

url: https://www.checkmyfile.com/
title: Checkmyfile | Credit score and most detailed credit report
description: See your info from Experian, Equifax, and TransUnion in one place with the most detailed credit report you can get. Take steps to grow your credit score.

Technology

CDN: Azure Front Door
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (6)

images.ctfassets.net×20
applepay.cdn-apple.com×1
cdn.brevo.com×1
pay.google.com×1
widget.trustpilot.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

01872304050

Address

Credit Reporting Agency Ltd, 20-21 Lemon Street, Truro, TR1 2LS

Registration

Registrar

Amazon Registrar, Inc.

Created

2000-03-22

Expires

2027-03-22 291 days left

Updated

2026-05-15

Name servers

ns-1299.awsdns-34.org
ns-146.awsdns-18.com
ns-1659.awsdns-15.co.uk
ns-971.awsdns-57.net

DNS records live

NS

ns-1299.awsdns-34.org
ns-146.awsdns-18.com
ns-1659.awsdns-15.co.uk
ns-971.awsdns-57.net

MX

10 checkmyfile-com.mail.eo.outlook.com

TXT

Show 11 TXT records

hegumgv7troqh7kmboqq1hhorg
U6zuo2xwmj+jBRsLxHqcTzTJCVyEbTppBT4ccAia+zxw0jWueipfZELIFZ4SisfzKGhtIy5+USA6himm2b3CWQ==
09008A7149
gitkraken-domain-verification=1ee8177cf282ac187f6905a259cbd3d9d5c89f6c79b0cf920411c5d75e758c46
241E4F7454
llhomcj5h921d2mgu7gg417oqn
D64C37393E
MS=C0F3C21C6FD3FE888CA06C707EF3158644C0C386
7a98af17e63a0ac09ce2e96d03992fbc
ctv6743ui75u2s2lh7krpidmtq
parallels-domain-verification=918e98b0c34647a0ab5b50e3748143dcefc3cf7e0fba4c91a8e51b06cebef5b8

Verified for

Apple
Atlassian
Canva
Cisco
Figma
GlobalSign
Google
Microsoft 365
OpenAI

Email authentication strong

SPF

v=spf1 ip4:185.2.165.200 include:spf.protection.outlook.com include:mail.zendesk.com include:145722711.spf07.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1;p=quarantine;rua=mailto:21a2309924@rua.easydmarc.eu;ruf=mailto:21a2309924@ruf.easydmarc.eu;fo=1

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCnipapZATcc4WyWDrVKeiU4rgLrQzvYytQGXBzM5qbpuz2NitqNB3PnSkrV8ZqGH1Kzgys5M0oGUU0llprTA…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaFMLJ6RLpDftKGTLzINl0etVm7d91JuoffqFnzLPJ6MxGsJp2tvxSne2VK9krTFkNLdBTu9/Ninen…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-08-02 to 2026-09-01

Expires in 89 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.checkmyfile.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: accelerometer=(), autoplay=(), camera=(), payment=(*), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(self "https://www.youtube.com"), picture-in-picture=(self "https://www.youtube.com"), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(self), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://log.checkmyfile.com https://*.trustpilot.com https://*.zendesk.com https://static.zdassets.com https://ekr.zendesk.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://*.checkmyfile.com wss://*.zopim.com https://www.clarity.ms https://cdn-cookieyes.com https://*.reddit.com https://www.facebook.com https://connect.facebook.net https://*.g.doubleclick.net https://widget-mediator.zopim.com https://static.zdassets.com https://www.googletagmanager.com https://www.gstatic.com https://*.google-analytics.com https://*.bing.com https://*.bing.net https://www.googleadservices.com https://www.redditstatic.com https://*.licdn.com https://*.pinimg.com https://*.pinterest.com https://analytics.tiktok.com https://*.adnxs.com https://h64.online-metrix.net https://*.brevo.com https://sibautomation.com https://*.hotjar.com http://*.hsforms.net https://static.hsappstatic.net https://*.fs1.hubspotusercontent-
strict-transport-security: max-age=63072000; includeSubDomains; preload