eqaccountants.co.uk

HTML metadata

Title: EQ Chartered Accountants - Tax, Accountants and Business Advisors
Description: EQ Chartered Accountants is a modern accounting practice and one of the largest independent firms in Scotland.
Language: en-GB
Canonical: https://www.eqaccountants.co.uk/

Open Graph

url: https://www.eqaccountants.co.uk/
title: EQ Chartered Accountants - Tax, Accountants and Business Advisors
locale: en_GB
site name: EQ Chartered Accountants
description: EQ Chartered Accountants is a modern accounting practice and one of the largest independent firms in Scotland.

Technology

Server: nginx
CMS: WordPress
PHP: 8.2.31 security-only
jQuery: 3.7.1

Fonts

Google Fonts

Third-party hosts loaded (5)

d1ssu070pg2v9i.cloudfront.net×3
fonts.googleapis.com×2
fonts.gstatic.com×1
gmpg.org×1
www.google.com×1

Social

Contact

Address: 14 City Quay, Dundee DD1 3JA

Registration

Registrar

Team Blue Internet Services UK Limited t/a Team Blue Internet Services Limited t/a names.co.uk

Created

2004-07-18

Expires

2026-07-18 58 days left

Updated

2025-07-18

Name servers

mario.ns.cloudflare.com.
val.ns.cloudflare.com.

DNS records live

NS

mario.ns.cloudflare.com
val.ns.cloudflare.com

MX

Show 6 MX records

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com
15 mx101.everycloudtech.com
20 mx102.everycloudtech.com
30 mx103.everycloudtech.com
40 mx104.everycloudtech.com

TXT

reftab-domain-verification=4b285a2297f22a53d63ce2de12555d84

Verified for

Atlassian
Microsoft 365

Email authentication strong

SPF

v=spf1 include:eu._netblocks.mimecast.com include:_spf.createsend.com ip4:52.50.152.121/32 include:spf.exclaimer.net include:spf.everycloudtech.com include:spf.everycloud.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:7c86932a2b3c099@rep.dmarcanalyzer.com,mailto:af548b6404bd4b989fee25d14544d272@dmarc-reports.cloudflare.net; ruf=mailto:7c86932a2b3c099@for.dmarcanalyzer.com; fo=1;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDRknLCCtPFkswZkOAf/nFTJcBaSTw12eoPciQ09nb++n5yW0U+JMUym4kLPxaCuu7k/PqHUxv1FvSzLdgbGi…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tZsRv4potN8Pi/JDAHcmAoQQBNiR0jQ1gvIYiXLdUIBYd2T5TR29ah6tckhkkzKtE87PJqGPdsCFXhyGL…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaMK9sT/IvBhYgzO7eubOAntNV1FXpv+TJ07Ru4hwqxNq3+choCEQS7c5Qofso84d8lljxq0k/iiDW9V6A…

selectors probed

Certificate (current)

R13

from 2026-04-30 to 2026-07-29

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.eqaccountants.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: compute-pressure=(), geolocation=(self), microphone=(), camera=(), fullscreen=*, picture-in-picture=*, payment=(), autoplay=*, interest-cohort=(), sync-xhr=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https: https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https: https://fonts.gstatic.com; connect-src 'self' https: https://*.google-analytics.com https://*.googletagmanager.com; frame-src 'self' data: https://*.youtube.com https://*.youtube-nocookie.com https://www.googletagmanager.com https://player.vimeo.com https://maphub.net https://*.google.com https://*.maps.google.com; child-src 'self' data: https://*.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com https://maphub.net https://*.google.com https://*.maps.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self';
strict-transport-security: max-age=31536000; includeSubDomains; preload

Links to (4)

Linked from (1)

sumer.co.uk×2