churchill-living.co.uk
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- Cookiebot
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (8)
- kit-pro.fontawesome.com×2
- consent.cookiebot.com×1
- consentag.eu×1
- gmpg.org×1
- widget.trustpilot.com×1
- www.facebook.com×1
- www.googletagmanager.com×1
- www.youtube.com×1
Social
Contact
- Phone
Registration
- Registrar
- Gandi
- Created
- 2024-02-01
- Expires
- 2027-02-01 255 days left
- Updated
- 2025-12-28
- Name servers
-
- opal.ns.cloudflare.com.
- trevor.ns.cloudflare.com.
DNS records live
- NS
-
- opal.ns.cloudflare.com
- trevor.ns.cloudflare.com
- MX
-
- 10 eu-smtp-inbound-1.mimecast.com
- 10 eu-smtp-inbound-2.mimecast.com
- TXT
-
_w3see267bx3zqzjf624uf3w8bvp5bcv0ed1fe018aef21ab3050b04edbb771fc811043696f
- Verified for
-
- GlobalSign
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 mx a ip4:78.129.233.101 ip4:208.85.54.223 ip4:208.85.54.226 ip4:74.112.64.38 ip4:74.112.64.47 ip4:74.112.65.118 ip4:188.65.33.4 ip4:51.132.59.169 ip4:185.58.86.221 include:eu._netblocks.mimecast.com include:_spf.spotlergroup.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=none;sp=none;rua=mailto:dmarc@crl.co.uk;ruf=mailto:dmarc@crl.co.uk;policy: none (monitoring only) · sp=none - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgB3fs0d72UUCcU07UNV7JeyBuRBzmn8pd4/MAFNXIoWIOq195/Dufipgi9pKK/Ho3ziHWENJFmbKH…
selectors probed - selector1:
Certificate (current)
GlobalSign RSA OV SSL CA 2018
Expires in 55 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
autoplay=(), camera=(), microphone=(), midi=()- x-content-type-options
nosniff- content-security-policy
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;- strict-transport-security
max-age=7776000; includeSubDomains
Links to (5)
- facebook.com×1
- instagram.com×1
- trustpilot.com×1
- x.com×1
- youtube.com×1
churchill-living.co.uk