dudleybuildingsociety.co.uk

HTML metadata

Title: We will be there - Dudley Building Society
Description: There to help people live better lives. Here to look after your savings and mortgages, while you get on with the important things.
Language: en-GB
Canonical: https://www.dudleybuildingsociety.co.uk/

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (6)

d1la6kc2zx90wr.cloudfront.net×22
audioxi-258-adswizz.attribution.adswizz.com×1
cdn-cookieyes.com×1
static.srcspot.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar

123-Reg Limited t/a 123-reg

Created

1997-03-12

Expires

2027-03-12 295 days left

Updated

2025-04-12

Name servers

clayton.ns.cloudflare.com.
serena.ns.cloudflare.com.

DNS records live

NS

clayton.ns.cloudflare.com
serena.ns.cloudflare.com

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com
100 eu-smtp-1.mimecast.com
100 eu-smtp-2.mimecast.com

TXT

h6qopc4dhvi44mttml13cgski7
3srg4u3bi5v02amtchiq7c6iku
access-domain-verification=6025bbe3e71da687215de929c9701eaab030d79e5af2ad2ac084214fd90a8957

Verified for

Apple
Google
Microsoft

Email authentication strong

SPF: v=spf1 a include:spf.protection.outlook.com include:_netblocks.mimecast.com ip4:83.217.246.72/32 ip4:51.140.37.132/32 ip4:51.141.5.228/32 ip4:91.186.188.141/26 ip4:83.217.246.94/26 ip4:83.231.158.129/26 ip4:91.186.188.8/26 ip4:185.160.252.224 ip4:91.186.188.50/32 ip4:85.210.64.80/32 include:servers.ebsnd.com -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:455d1f32446649ba8af7e731e3d4480a@dmarc-reports.cloudflare.net
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-11 to 2026-08-09

Expires in 81 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.dudleybuildingsociety.co.uk/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: same-origin
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' das.dudleybuildingsociety.co.uk; default-src 'self' data: https://*.google.co.uk https://*.doubleclick.net https://*.vimeo.com https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://d1la6kc2zx90wr.cloudfront.net https://*.typekit.net https://api.reciteme.com/ https://*.iconnode.com https://octave-2891-adswizz.attribution.adswizz.com https://www.youtube.com https://*.clarity.ms https://cdn-cookieyes.com https://*.cookieyes.com https://*.bing.com https://*.cmadvantage.co.uk https://code.jquery.com https://*.surveymonkey.com https://prod.smassets.net https://audioxi-258-adswizz.attribution.adswizz.com; style-src 'self' 'unsafe-inline' https://*.typekit.net https://fonts.googleapis.com http://api.reciteme.com https://api.reciteme.com https://*.cmadvantage.co.uk https://code.jquery.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.goo
strict-transport-security: max-age=15768000;