daylesfordstays.com

.com crawl

First seen 2026-04-22 · Last seen 2026-05-20 · ok HTTP/1.1 200 4798 ms crawled 2026-05-16

US · 141.193.213.10 · AS209242 Cloudflare London, LLC

Reputation 100/100

Classifying

HTML metadata

Title: Welcome to Daylesford Stays in the Cotswolds
Description: Escape to the Cotswolds with Daylesford Stays. Discover traditional cottages and modern pubs in stunning countryside settings. Book today!
Language: en

Open Graph

title: Welcome to Daylesford Stays in the Cotswolds
locale: en_GB
site name: Daylesford Stays
description: Escape to the Cotswolds with Daylesford Stays. Discover traditional cottages and modern pubs in stunning countryside settings. Book today!
updated time: 2026-04-16T10:11:36+01:00

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

Termly

Third-party hosts loaded (4)

fd.cleantalk.org×2
app.termly.io×1
static.klaviyo.com×1
www.googletagmanager.com×1

Social

Contact

Email

concierge@daylesfordstays.com

Registration

Registrar

Cloudflare, Inc.

Created

2023-05-17

Expires

2033-05-17 2553 days left

Updated

2023-05-17

Name servers

major.ns.cloudflare.com
venus.ns.cloudflare.com

DNS records live

NS

major.ns.cloudflare.com
venus.ns.cloudflare.com

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

knowbe4-site-verification=eeecccdc0bf3b2e1f5b717cbedcb3544
0ed1fe018a8809b7410c9d495b83ef4d685fb552bc
klaviyo-site-verification=TuHMVy

Verified for

Google
Microsoft 365

Email authentication strong

SPF: v=spf1 include:eu._netblocks.mimecast.com include:spf.ireshotels.com include:mail.zendesk.com include:wpengine.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; pct=100; rua=mailto:a23gjmox@ag.eu.dmarcian.com; ruf=mailto:a23gjmox@fr.eu.dmarcian.com;
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

from 2026-04-28 to 2026-07-27

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.daylesfordstays.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline'; script-src 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' *.klaviyo.com; script-src-elem 'self' 'unsafe-inline' app.termly.io *.cleantalk.org r1.dotdigital-pages.com *.cloudflareinsights.com *.klaviyo.com *.doubleclick.net www.googletagmanager.com connect.facebook.net maps.googleapis.com; style-src 'self' data: 'unsafe-inline' *.klaviyo.com *.typekit.net fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' *.typekit.net *.googleapis.com *.klaviyo.com; img-src 'self' bookings.thewildrabbit.co.uk bookings.thebellatcharlbury.com bookings.thefoxatoddington.com data: www.daylesfordstays.com *.cleantalk.org www.facebook.com *.cdninstagram.com secure.gravatar.com *.google.co.uk *.google.com *.googletagmanager.com maps.gstatic.com *.googleapis.com *.w.org; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com use.typekit.net *.klaviyo.com js.stripe.com; connect-src 'self' app.termly.io *.cleantalk.org *.klaviyo.com *.doubleclick.net *.googlesynd
strict-transport-security: max-age=63072000; includeSubDomains; preload