choochoo.co.uk
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- appleid.cdn-apple.com×1
- cdn-cookieyes.com×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- ns-1268.awsdns-30.org
- ns-1801.awsdns-33.co.uk
- ns-198.awsdns-24.com
- ns-888.awsdns-47.net
- TXT
-
firebase=choo-choo-24b04
- Verified for
-
Email authentication no MX
- SPF
-
v=spf1 include:_spf.firebasemail.com include:amazonses.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 73 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' appleid.cdn-apple.com web-sdk-cdn.singular.net *.sentry.io *.sentry-cdn.com *.cookieyes.com cdn-cookieyes.com accounts.google.com www.googletagmanager.com *.stripe.com *.vercel.live vercel.live; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: *.cookieyes.com cdn-cookieyes.com *.gravatar.com www.gravatar.com flagcdn.com; font-src 'self' fonts.gstatic.com; connect-src 'self' *.sentry.io *.ingest.sentry.io *.singular.net *.cookieyes.com cdn-cookieyes.com *.choochoo.co.uk choochoo.co.uk www.google-analytics.com region1.google-analytics.com www.googletagmanager.com *.stripe.com raileasyapi.apidev.trainsplit.com raileasyapi.api.trainsplit.com *.vercel.live vercel.live; frame-src 'self' *.stripe.com *.vercel.live vercel.live; worker-src 'self' blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'- strict-transport-security
max-age=63072000
Links to (5)
- trainsplit.com×1
- tiktok.com×1
- instagram.com×1
- google.com×1
- apple.com×1
Linked from (1)
Use this data via API
Everything on this page for choochoo.co.uk is available as JSON from the indexo.dev REST & MCP API.
curl "https://indexo.dev/api/v1/domains/choochoo.co.uk" \ -H "X-API-Key: idx_..."