clarionhg.com

HTML metadata

Title: Clarion Housing Group
Description: We’re the UK’s largest housing association, a major home builder, and an investor in people and places. We’re building for a better future. Today.
Language: en

Open Graph

title: Clarion Housing Group
description: We’re the UK’s largest housing association, a major home builder, and an investor in people and places. We’re building for a better future. Today.

Social

Contact

Phone

675646394

Address

st housing associations). VAT no 67564

Registration

Registrar

Register SPA

Created

2016-06-29

Expires

2026-06-29 40 days left

Updated

2025-05-06

Name servers

ns0.lcn.com
ns1.lcn.com
ns2.lcn.com

DNS records live

NS

ns0.lcn.com
ns1.lcn.com
ns2.lcn.com

MX

5 clarionhg-com.mail.protection.outlook.com

TXT

Show 19 TXT records

docusign=ae3f8d3f-29f8-45d4-ab80-5abe68d6e9c5
jamf-site-verification=xSp8TYmvB7Ua2ZPV11yLog
ddosx-site-verification=1914d57694cffeeef20dee6f8265ee2dd4bb75addf369a4d9d2242e8f780a0c8
9swrym3kjryz0wjvst8kbv5q4bmkzg4j
apple-domain-verification=ryjOU9GJXAInD1iv
_1pp74c694l8qkdloag3y0nbfxklv3l4
docusign=74aa00be-6d1a-471e-a9f7-8c75805fda1a
Y2xhcmlvbg==
MS=ms18966679
_znpzava48vv3l5h9rtwrm86cd4kzdp7
d365mktkey=Wdsmj7xxHeaN2UVWtomutvbXxbDhwZnegNhuZdlDYugx
03dd9b8dc6e03a0a5ccce3246835b59e
kJukgsnNJF3N318OwC6cdeHMv38yWv5RMJOBNsHaur8wT20/ZmRuqDwgjLESemw0D8Kn/NVLR2tgpnsdryNgnw==
26zvh7hbfm0z3sxc377qs7khsp1bnvgy
0cbe8356d46ec72e0e5c1eb04aef908c7bd3f229
0ed1fe018ae935255446054a03b81a83d6a5b8851e
ms-domain-verification=ef4cc58d-5b29-47a6-a535-89359e518cd9
figma-domain-verification=4f6ff814404ae7314bfd29ea615974b8a777766e930affa15a6f764cba0da00e-1762169134
anthropic-domain-verification-4tj1gr=KgSLJfoPJNcbrl4O11TDJwCql

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.salesforce.com ip4:51.132.228.120 -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc-reports@clarionhg.com; ruf=mailto:dmarc-reports@clarionhg.com; aspf=s; adkim=s; fo=1;

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQCmpyVlKQpAqOhT+66CPE0mVHANWSyPT14Af5TcqOpyoOO+0qbM/XqW/e3MYOVdcCwBZvw8N/Ri5szjNrvq…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCWp6KtFVsOWpBPFoiN48rbBWBE5NwufRsOfFP3bMsaTUCQh2s5P8Sxqmfnm0cpFulFUWn9h/oRcDWBG5MtPF…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfRecmPUut49lH44bt/T/4jkfkh4H3XD7KIb12NRI/1Gi4U8D2xczxH1//yYAB9pyI9ibpOiMzmumpoK9G…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClw8pBFLL/wFjAoZCtg6BPa15sECvsAx0ASFWRXDsshYYMblSekEWxipTbt6AgEkZ1I631btc3UJTz2g1YgktaZ+…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-09-22 to 2026-09-23

Expires in 126 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.clarionhg.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' https://cdn.clarionhg.com https://maps.gstatic.com/ https://www.facebook.com/ https://maps.googleapis.com data: https://www.google.co.uk/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://www.google.com/; connect-src 'self' https://apikeys.civiccomputing.com/ https://region1.google-analytics.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://maps.googleapis.com/ https://region1.analytics.google.com/ https://clapi.civiccomputing.com https://www.facebook.com/; font-src 'self' https://fonts.gstatic.com/; media-src 'self' https://cdn.clarionhg.com; frame-src https://www.youtube.com/ https://otp.tools.investis.com/ https://www.facebook.com/ https://td.doubleclick.net/; frame-ancestors 'self'; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://cc.cdn.civiccomputing.com/ htt
strict-transport-security: max-age=31536000; includeSubDomains; preload