collegeofradiographers.ac.uk
HTML metadata
Technology
- CDN
- Cloudflare
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- cdnjs.cloudflare.com×2
- stackpath.bootstrapcdn.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- arushi.ns.cloudflare.com
- josh.ns.cloudflare.com
- MX
-
- 10 _dc-mx.7985259331d9.collegeofradiographers.ac.uk
Email authentication weak
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
WE1
Expires in 55 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SameOrigin- x-content-type-options
nosniff- content-security-policy
default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com *.google.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com payments.worldpay.com polyfill.app polyfill.io *.googleapis.com cdn.thinglink.me thinglink.com ajax.cloudflare.com *.hotjar.com google-analytics.com tagmanager.google.com googletagmanager.com https://www.youtube.com gstatic.com https://www.clarity.ms https://www.googletagmanager.com https://connect.facebook.net https://platform.twitter.com https://player.vimeo.com https://pme.proquest.com https://www.google.com https://conoret.com https://www.gstatic.com https://www.google-analytics.com;style-src 'self' 'unsafe-inline' payments.worldpay.com fast.fonts.net cdn.thinglink.me fonts.googleapis.com https://cdn.honey.io;img-src 'self' data: *.sor.org https://www.collageofradiographers.ac.uk img.youtube.com cdn.thinklink.me i.vimeocdn.com cdnjs.cloudflare.com i.ytimg.com www.google-analytics.com https://www.googletagmanager.com www.gstatic.com https://custom
Links to (6)
Linked from (2)
- sor.org×1
- rothband.com×1