collinsongroup.com

HTML metadata

Title: Travel, Loyalty & Customer Engagement | Collinson Group
Description: We are a global, privately-owned company helping the world travel with ease and confidence. We help the biggest brands build loyalty and engagement.
Language: en-GB
Canonical: https://www.collinsongroup.com/en-GB

Open Graph

title: Travel, Loyalty & Customer Engagement
locale: en-GB
description: We are a global, privately-owned company helping the world travel with ease and confidence. We help the biggest brands build loyalty and engagement.

Technology

CDN: Amazon CloudFront
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (5)

images.ctfassets.net×60
image.mux.com×1
stream.mux.com×1
videos.ctfassets.net×1
www.googletagmanager.com×1

Social

Contact

Address: Sussex House, Perrymount Road, RH16 3SN, Sheencroft House, GB

Registration

Registrar

SafeNames Ltd.

Created

2002-05-21

Expires

2026-05-21 1 day left

Updated

2025-05-21

Name servers

ns20.digicertdns.com
ns21.digicertdns.com
ns22.digicertdns.com
ns23.digicertdns.net
ns24.digicertdns.net
ns25.digicertdns.net

DNS records live

NS

ns20.digicertdns.com
ns21.digicertdns.com
ns22.digicertdns.com
ns23.digicertdns.net
ns24.digicertdns.net
ns25.digicertdns.net

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 34 TXT records

docusign=47c69420-2de0-408b-9758-8f60f6fb95ff
bitrise-verification=528e68473b8bd2fd-EVEKX4NHjxXm
sending_domain843593=7bfd14bd35cc2fe01c251668b3d1e1aa60b3d6e86774f1e1fb1739a65752e384
_9xwjfdmnt07twd9gd4wrofzws6w4txo
cVSQ/MfRcU8Q0MlTF4mmxYChKKkOTXFKDxRfNEDi3yFxqpTOO5HR5ORMqLLF8Jdj3LPrcIkPW6gWPG5zw2CiDA==
jamf-site-verification=D251geWGshMuiOe0Nqjt_Q
workplace-domain-verification=GTNkIuYTqd0m8ym3DAHtQ4Lyc3GeHV
MS=ms78s-frg-9af
g405psdxkfx7kxj02ybzmvcr5r4q4326
atlassian-domain-verification=SAazHuIpTNAOt6bfkOPD6iMRSsuqO1DzFAl/pN7zHCTaj/46MVziHgbDoxaGUH02
smartsheet-site-validation=SFte0up3-p26-PxktXHLRGVpaazJZ9Ff
99r49pycbjyng5fcww1pht0lg9q506n4
djk1s96g9wljnb07ps04l60775dggdzc
mailerlite-domain-verification=79cf535c85c8d8bb446fe18df5253803f5d91a58
MS=ms70780460
d1z6nttn7q1hfgs9d82x0x61nq55j0jv
pardot843593=1f1f7eea192ef0a0e9357cd5c732fb2ec1d2747576a0701576cf64f0c6785b4c
83m0fdbv11pdnxwvmbr827s7r020r9qt
mongodb-site-verification=czSRWsPoHQR3NlqI3ybYcMgGc2PMcCJC
hcp-domain-verification=6fd01e6f8b44c64c3bf188c05f29d260351ae3b1295d2fd2611a0f2806eb0557
jvc74byz23f4r989qsx7vgqgnn3mqp8x
mandrill_verify.cFrNlZIUhGtrWNTP3oEIFA
atlassian-domain-verification=R/A0n8XL20flpOhYEAvZAanSNzsjtqjvjTSv3PUZhb7p2RweltJh3UkQC42tSRLa
jxlk4ry3jd097l9yqzy14wrlk38c728t
0ed1fe018a75d8f7c04d4a4d6dbd780f67cda9552c
whcyw4bywkmjdhw30fdsbltchzl3t6js
nd697fqhnjqpbr59xklz7yrq3nt3z8zm
zlmr9yndvt2xh83hhndfn79q40pwh5zg
openai-domain-verification=dv-VmtYIONwrVPDUmPyQJOEUWPg
atlassian-domain-verification=G8C5SdZazvvm0EaDgHh4LWh94CPSvnV/b3ndukqEICCNUb4R1FOzX4V6e6A7iiM5
apple-domain-verification=tkHozLFloywMsdEf
MS=F53BDCDB501EA6CFB9E27AA6F2C97A7B4D31174B
264j3ylmdsxfmccc332c8hjhv0w5128s
google-site-verification=pGPn38_L8Db4jvpNn9PkQGHDB5V0xDMFQuh7HyhdJ8Y

Email authentication partial

SPF: v=spf1 include:_spf.mlsend.com include:e8xblbwpxe.spf.mailauth-us.ironscales.com -all
strict (-all)
DMARC: v=DMARC1; p=none; rua=mailto:7q32ebczxx@rua.mailauth-us.ironscales.com; ruf=mailto:7q32ebczxx@ruf.mailauth-us.ironscales.com; pct=100; fo=1;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M01

from 2026-01-27 to 2027-02-26

Expires in 282 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.collinsongroup.com/en-GB

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://view.ceros.com https://cdn.ceros.com https://www.gstatic.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googleadservices.com https://*.googlesyndication.com https://www.google.com https://google.com https://*.onetrust.com https://static.userback.io https://snap.licdn.com https://*.licdn.com https://www.google-analytics.com https://*.online.tableau.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://static.userback.io https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://static.userback.io; connect-src 'self' https:; frame-src 'self' https://view.ceros.com https://cdn.ceros.com https://www.googletagmanager.com https://assets.ctfassets.net https://www.google.com https://recaptcha.google.com https://*.online.tableau.com https://*.collinsonloyalty-360.com https://player.vimeo.c
strict-transport-security: max-age=31536000; includeSubDomains; preload

Links to (2)

linkedin.com×4
x.com×4