collectors-club-of-great-britain.co.uk
HTML metadata
Technology
- CDN
- Cloudflare
- Analytics
-
- Google Tag Manager
- Ads
-
- Google Ads (DoubleClick)
- Fonts
-
- Google Fonts
Third-party hosts loaded (14)
- cdnjs.cloudflare.com×7
- azure.wgp-cdn.co.uk×4
- kit.fontawesome.com×3
- securepubads.g.doubleclick.net×3
- stackpath.bootstrapcdn.com×3
- www.googletagmanager.com×3
- cdn.jsdelivr.net×2
- fonts.googleapis.com×2
- fonts.gstatic.com×2
- googletagservices.com×2
- quantcast.mgr.consensu.org×2
- fundingchoicesmessages.google.com×1
- ls.dycdn.net×1
- r1-t.trackedlink.net×1
Social
Contact
- Phone
DNS records live
- NS
-
- graham.ns.cloudflare.com
- rose.ns.cloudflare.com
- MX
-
- 10 mx0.123-reg.co.uk
- 20 mx1.123-reg.co.uk
- Verified for
-
Email authentication weak
- SPF
-
v=spf1 a a: ip4:168.245.73.55 -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
WE1
Expires in 50 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SameOrigin- x-content-type-options
nosniff- content-security-policy
default-src * 'self' data: blob:; script-src * 'self' 'unsafe-inline' 'unsafe-eval' ; style-src * 'self' 'unsafe-inline' ; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' blob: *.collectors-club-of-great-britain.co.uk *.wgp-cdn.co.uk *.cloudflare.com https://api.raygun.io wss://am.freshrelevance.com https://apikeys.civiccomputing.com https://clapi.civiccomputing.com https://www.googleapis.com *.advertising.com *.adnxs.com *.doubleverify.com *.serving-sys.com https://securepubads.g.doubleclick.net *.googlesyndication.com https://stats.g.doubleclick.net *.google-analytics.com *.pbstck.com quantcast.mgr.consensu.org test.quantcast.mgr.consensu.org audit-tcfv2.quantcast.mgr.consensu.org *.skimresources.com *.trackedlink.net https://*.fontawesome.com *.trackedweb.net *.analytics.google.com https://www.googleadservices.com *.google.com *.g.doubleclick.net *.gstatic.com *.cmp.quantcast.com *.quantcast.com *.inmobi.com https://mutualdocs.com wss://*.dycdn.net https://r1-fre- strict-transport-security
max-age=2592000