cheddargorge.co.uk
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (4)
- media.umbraco.io×58
- cc.cdn.civiccomputing.com×1
- use.typekit.net×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- Tucows Inc t/a Tucows
- Created
- 1997-12-16
- Expires
- 2026-12-16 210 days left
- Updated
- 2025-11-17
- Name servers
-
- kay.ns.cloudflare.com.
- seth.ns.cloudflare.com.
DNS records live
- NS
-
- kay.ns.cloudflare.com
- seth.ns.cloudflare.com
- MX
-
- 10 d221260.a.ess.uk.barracudanetworks.com
- 20 d221260.b.ess.uk.barracudanetworks.com
- TXT
-
Show 5 TXT records
brevo-code:680893a64fb04dca6792bd87bf3df2a6facebook-domain-verification=nghrtl2p8he4oea9xvp186zei6ezd0google-site-verification=w7mUWXwSlm4cKRpAcKZ755Qq34BQONGpYXnACl8OveIMS=3172019400D6C10276946B51F0720726B4852D97MS=ms79939370
Email authentication partial
- SPF
-
v=spf1 a mx include:spf.mtasv.net include:cmail1.com include:spf.messagelabs.com include:spf.protection.outlook.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.compolicy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxXVylzFpQKAWtMvl99yRyFyb56ra9xzzBAYTqi4zWH2mGUCjP49vgU8qjM5eLB8Ulu+93cQxZBxGv…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 71 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
DENY- permissions-policy
camera=(), microphone=(), geolocation=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.co.uk https://ad.doubleclick.net https://googleads.g.doubleclick.net https://secure.adnxs.com https://cc.cdn.civiccomputing.com https://cmp.inmobi.com https://connect.facebook.net https://secure.quantserve.com https://rules.quantcount.com https://c5.adalyser.com https://player.vimeo.com https://longleat.api.useinsider.com https://cdn.mouseflow.com https://www.mczbf.com https://*.opayo.eu.elavon.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; img-src 'self' data: https://media.umbraco.io https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://www.google.co.uk https://c5.adalyser.com https://www.facebook.com https://i.vimeocdn.com https://cdn.mouseflow.com https://www.mouseflo- strict-transport-security
max-age=31536000; includeSubDomains; preload