duttongregory.co.uk

HTML metadata

Title: Welcome to Dutton Gregory
Description: Dutton Gregory Solicitors with offices throughout Hampshire, Dorset, Surrey & Merseyside, we meet the needs of companies and private individuals UK-wide.
Language: en-GB
Generator: performance-lab 4.1.0; plugins: webp-uploads
Canonical: https://www.duttongregory.co.uk/

Open Graph

url: https://www.duttongregory.co.uk/
title: Welcome to Dutton Gregory
locale: en_GB
site name: Dutton Gregory
description: Dutton Gregory Solicitors with offices throughout Hampshire, Dorset, Surrey & Merseyside, we meet the needs of companies and private individuals UK-wide.

Technology

CDN: Cloudflare
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Social widgets

Vimeo Embed

Third-party hosts loaded (4)

cdn-cookieyes.com×1
player.vimeo.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Contact

Phone

188 0564 36

DNS records live

NS

ns1.livedns.co.uk
ns2.livedns.co.uk
ns3.livedns.co.uk

MX

10 duttongregory-co-uk.mail.protection.outlook.com

TXT

jecamd4abtepjikjs7ecgbkkj4
bw=Vnp5eu1nDECmRzXbuq1OKTl9Y2e6sAF489NOuun4ZQSM

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 include:eu._netblocks.mimecast.com include:spf.uk.exclaimer.net include:spf.protection.outlook.com include:_spf.psm.knowbe4.com ip4:148.59.101.16/28 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@duttongregory.co.uk; ruf=mailto:dmarc@duttongregory.co.uk; fo=1

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDyyQ2qxuDn1RNyW/l59VlXrHNYahHCrPhSG5zrwiLYo1PknJGJGx2kOsoKnmYRAtAHkRlJtZ2QT+F8iBUpBv…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLGF29yjaeSwxLn0kdfS16/sArW4+m+x5egdJxp3Lk7IuBSsfYqRzNOGeijoTh8z7rJV92obyKXQ8B…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-05-03 to 2026-08-01

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.duttongregory.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://player.vimeo.com https://cdn-cookieyes.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; font-src 'self' https://use.typekit.net https://p.typekit.net https:; frame-src https://js.stripe.com https://hooks.stripe.com https://player.vimeo.com; connect-src 'self' https://api.stripe.com https://m.stripe.network https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://log.cookieyes.com https://cdn-cookieyes.com https://use.typekit.net; img-src 'self' data: https:; object-src 'none'; base-uri 'self'; form-action 'self' https://hooks.stripe.com https://secure.worldpay.com; frame-ancestors 'self'; upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains