coversure.co.uk
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress 6.9.4
- jQuery
- 3.7.1
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- api.feefo.com×3
- www.googletagmanager.com×2
- kit.fontawesome.com×1
Social
DNS records live
- NS
-
- auth0.razorblue.com
- auth1.razorblue.com
- auth2.razorblue.com
- MX
-
- 0 eu-smtp-inbound-1.mimecast.com
- 0 eu-smtp-inbound-2.mimecast.com
- TXT
-
D0A2T99323n8yvlw2fm4tjskft1q8jj3xpq4s87svk0ed1fe018aec3ec4436888437686460e5028cdd944
- Verified for
-
- GlobalSign
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 ip4:192.254.119.187 ip4:167.89.105.212 ip4:212.23.20.136/29 ip4:89.37.69.200/29 ip4:51.140.10.113 include:spf.protection.outlook.com include:mail.briefyourmarket.com include:eu._netblocks.mimecast.com include:spf.acturis.com include:_spf.elasticemail.com include:_spf.eu.mailgun.org include:servers.mcsv.net -allstrict (-all) - DMARC
-
v=DMARC1;p=reject;sp=reject;adkim=s;aspf=spolicy: reject (enforced) · sp=reject - DKIM
-
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypAcePGKOnc96WHh8E/yA7IY/u/Aljufw2E6lJxQSXzUIHV+DAdP49+Noiugrtp9cu3D4g+cBVgBSi4kHx… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDignAny/r3cGyaMwTsCzEp4574w5avSnD7dcCoA38YZF5sjumFxOyoDMKoB8vsjM8XoWhY9sCqXNGt6DNVhwNbxS…
selectors probed - k2:
Certificate (current)
GlobalSign Atlas R46 DV TLS CA 2026 Q2
Expires in 85 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://*.feefo.com https://ssl.google-analytics.com https://www.google.com https://www.google.co.uk https://www.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://storage.googleapis.com https://secure.gravatar.com https://www.facebook.com https://cdn-cookieyes.com https://s.w.org https://ps.w.org data:; media-src 'self' https://www.snapengage.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://*.feefo.com https://www.google.com/ https://www.googleadservices.com https://cdn-cookieyes.com https://www.gstatic.com https://cdn.jsdelivr.net https://dev.visualwebsiteoptimizer.com https://www.googletagmanager.com https://widget.trustpilot.com https://storage.googleapis.com https://www.google-analytics.com https://script.infinity-tracking.com https://connect.facebook.net https://www.snapengage.com; style-src 'self' 'unsafe-inline' https://*.feefo.com https://fonts.googlea- strict-transport-security
max-age=31536000; includeSubDomains; preload