cord-ev.com
HTML metadata
Technology
- Server
- Apache
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (7)
- widget.trustpilot.com×2
- www.googletagmanager.com×2
- api.feefo.com×1
- cdn-cookieyes.com×1
- js-eu1.hs-scripts.com×1
- www.dwin1.com×1
- www.facebook.com×1
Social
Contact
- Address
- 22, B1 2JT, Birmingham, GB
Registration
- Registrar
- Squarespace Domains II LLC
- Created
- 2023-03-30
- Expires
- 2027-03-30 313 days left
- Updated
- 2026-03-15
- Name servers
-
- ns-cloud-c1.googledomains.com
- ns-cloud-c2.googledomains.com
- ns-cloud-c3.googledomains.com
- ns-cloud-c4.googledomains.com
DNS records live
- NS
-
- ns-cloud-c1.googledomains.com
- ns-cloud-c2.googledomains.com
- ns-cloud-c3.googledomains.com
- ns-cloud-c4.googledomains.com
- MX
-
- 0 cordev-com01b.mail.protection.outlook.com
Email authentication strong
- SPF
-
v=spf1 include:spf.protection.outlook.com include:sendgrid.net include:139856335.spf08.hubspotemail.net -allstrict (-all) - DMARC
-
v=DMARC1; p=none; rua=mailto:d.m.a.r.c@cord-ev.com; ruf=mailto:d.m.a.r.c@cord-ev.compolicy: none (monitoring only) - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3xyXwmo5KNFtt8ECWovd9a9EroLocFbekW8MCUdeSLG6jfzcZYgjz5T0gD4MNz3jb3OOT+zNmp9fD5sV6… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LYIp5irmAw2TC/BGddT6RcYUgFv8WVfFzvwfgwsJJdcmXiiSzglhwN4o8Ezf4sy7gTYoelvuv3j3zqM6n…
selectors probed - s1:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 138 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- weak frame protection
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin, strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN, SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests;- strict-transport-security
max-age=15638400- content-security-policy-report-only
font-src *.googleapis.com https://*.gstatic.com data: *.dopplepay.com https://*.typekit.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.dopplepay.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.c