classichandtools.com
HTML metadata
Technology
- Server
- Apache
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- fonts.googleapis.com×1
- fonts.gstatic.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- rd transactions are processed securely.Copyright © 2026
Registration
- Registrar
- 123-Reg Limited
- Created
- 2003-05-20
- Expires
- 2026-05-20 0 days left
- Updated
- 2025-04-23
- Name servers
-
- ns67.domaincontrol.com
- ns68.domaincontrol.com
DNS records live
- NS
-
- ns67.domaincontrol.com
- ns68.domaincontrol.com
- MX
-
- 0 classichandtools-com.mail.protection.outlook.com
- TXT
-
Show 5 TXT records
zone-ownership-verification-3465c1a3b6f8ce83a48a9efd44c1c1c1e6b63077ed57c4734613858c808ddda8google-site-verification=iPwtZQe92H0m0UCMzNA3HsGCrUKrIlZt5ffJt-CM0GYD4785238MS=ms98733268apple-domain-verification=kldNWF40gwvynp2_NLeZ_K46C-icm3MpJuqa5UqwPLQ
Email authentication partial
- SPF
-
v=spf1 +include:spf.protection.outlook.com +ip4:78.129.138.88 +ip4:89.151.106.210 +ip4:213.175.208.156 +include:_spf.google.com +include:secureserver.net -allstrict (-all) - DMARC
-
V=DMARC1; p=none; rua=mailto:dmarc@classichandtools.com; ruf=mailto:dmarc@classichandtools.com; fo=s;policy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw30k/j24e+706MBC9Rju5mD5NLTLMutXjkdiR2cunm5W3RmGUYx5mDrk4repJVC3bXLxhTGMhaj1jj… - google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy3Svno/fqZ5IxXvbxbkjk9VCSNSWbL3zLd+XwIkM83iEBuxSu7Xus9Hy2ZXx8hacpZ9flfONka9Io… - selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfOWKDsRbE6ud7PRnEL1XBFBVyewPaDgLhAac5Vsi+KwSkoy82J9nghA4C5n6UUpkh3DNUdvyT/Hsl…
selectors probed - default:
Certificate (current)
Starfield Secure Certificate Authority - G2
Expires in 288 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(), payment=(self "https://*.stripe.com" "https://pay.google.com"), autoplay=*, sync-xhr=()- x-content-type-options
nosniff- content-security-policy
object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.vimeo.com *.ampproject.org www.youtube.com *.gstatic.com *.googleapis.com *.google.com *.google.co.uk *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.g.doubleclick.net *.trustpilot.com *.postcodeanywhere.co.uk *.stripe.com *.paypal.com *.paypalobjects.com *.zdassets.com grwapi.net *.openwidget.com *.goaffpro.com *.goaffpro.app- strict-transport-security
max-age=31536000; includeSubDomains; preload