cranswick.plc.uk

HTML metadata

Title: Cranswick | Home
Language: en-US
Canonical: https://cranswick.plc.uk/

Open Graph

url: https://cranswick.plc.uk/
title: Home - Cranswick
locale: en_US
site name: Cranswick
locale:alternate: en_US

Technology

CDN: Cloudflare

Third-party hosts loaded (8)

scontent-lhr6-1.cdninstagram.com×3
cdn-cookieyes.com×1
irs.tools.investis.com×1
maps.googleapis.com×1
s3.eu-west-1.amazonaws.com×1
scontent-lhr8-1.cdninstagram.com×1
scontent-lhr8-2.cdninstagram.com×1
unpkg.com×1

Social

DNS records live

NS

arch.ns.cloudflare.com
rihana.ns.cloudflare.com

MX

0 cranswick-plc-uk.mail.protection.outlook.com

TXT

bk5bsu7t1jf2ke6str1p4qjve8
mscid=QDQnL2DZicun3LA79BcnzkCvsyCoSF4bP6fKvNsUVr5S7z3u92zECbPDgi0YRRSFuBpaoZle6BSJFDn9MfpWtw==

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; ruf=mailto:cranswickplc@eu.cp-dmarc.com; rua=mailto:dmarc_agg@vali.email, mailto:cranswickplc@eu.cp-dmarc.com;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEyu5iBz0wuSv0WWscr6HvzELgi41NVmPeKNQXulBAHeGmHVo0ye/lOtHQO11RQLmEk15ci4oK+2ocuaSfYU…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+IV4x1Wo0UPIi433r7yBLC+dMoIrf4LZh6+lp9PY4DED5e9wMgvfG+oNZ/5pp3chrtTZT/Yp80fXX…

selectors probed

Certificate (current)

WE1

from 2026-03-20 to 2026-06-18

Expires in 29 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://cranswick.plc.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(self "https://www.youtube-nocookie.com" "https://www.youtube.com"), autoplay=(self "https://www.youtube-nocookie.com" "https://www.youtube.com"), encrypted-media=(self "https://www.youtube-nocookie.com" "https://www.youtube.com"), gyroscope=(self "https://www.youtube-nocookie.com" "https://www.youtube.com"), picture-in-picture=(self "https://www.youtube-nocookie.com" "https://www.youtube.com"), web-share=(self "https://www.youtube-nocookie.com" "https://www.youtube.com")
x-content-type-options: nosniff
content-security-policy: script-src https://unpkg.com https://www.google.com https: 'unsafe-eval' 'unsafe-inline' blob:; img-src 'self' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.co.uk cdn-cookieyes.com https://*.cdninstagram.com https://*.craftcms.com https://cranswick.plc.uk/ https://s3.eu-west-1.amazonaws.com/ https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com data:; frame-src https://www.googletagmanager.com/ https://td.doubleclick.net https://youtube.com https://youtu.be https://www.youtube.com https://www.youtu.be https://www.youtube-nocookie.com *.google.com *.investis.com; connect-src 'self' https://googleads.g.doubleclick.net https://unpkg.com/@googlemaps/markerclustererplus/ https://www.google.co.uk https://www.googleadservices.com *.cookieyes.com cdn-cookieyes.com https://*.googleapis.com *.google.com *.google-analytics.com https://*.gstatic.com data: blob:; font-src 'self' https://fonts.gstatic.com; style-src 'self' http
strict-transport-security: max-age=31536000
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: Cross-Origin-Embedder-Policy
cross-origin-resource-policy: same-site

Links to (5)

Linked from (1)

hullfc.com×1