indexo.dev

firstsave.co.uk

.uk crawl

First seen 2026-04-21 · Last seen 2026-05-15 · ok HTTP/1.1 200 5769 ms crawled 2026-05-15

US · 159.60.135.205 · AS35280 F5 Networks SARL

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
FirstSave

Technology

Server
volt-adc
Cookie consent
  • OneTrust

Third-party hosts loaded (1)

  • cdn-ukwest.onetrust.com×1

Contact

Email

Registration

Registrar
Claranet Limited t/a Claranet
Created
2006-10-03
Expires
2026-10-03 135 days left
Updated
2025-09-23
Name servers
  • ns1.f5clouddns.com.
  • ns2.f5clouddns.com.

DNS records live

NS
  • ns1.f5clouddns.com
  • ns2.f5clouddns.com
MX
  • 10 eu-smtp-inbound-1.mimecast.com
  • 10 eu-smtp-inbound-2.mimecast.com
TXT
Show 7 TXT records
  • _31j2nvrro4daswvyx6915kpu7kj65p7
  • abpi1rr9alsgulerdn6clcit2i
  • pgv639skn9dd9qlekhf8b8ngra
  • 3th4vzjm4p6xzd300jtxj0twqrs4g1r4
  • _q1gl97g2tigu3vazca0mm0t80i5gnff
  • sgh6flkc930mgqzz34j2nclq38llbkkt
  • _u64smqhfdsexjbt0xb48puk03kje5vu3th4vzjm4p6xzd300jtxj0twqrs4g1r4

Email authentication partial

SPF
v=spf1 include:eu._netblocks.mimecast.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:36ceb496c2ac453@rep.dmarcanalyzer.com; ruf=mailto:36ceb496c2ac453@for.dmarcanalyzer.com; fo=1;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

Go Daddy Secure Certificate Authority - G2
from 2025-08-16 to 2026-09-02
Expires in 104 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.firstsave.co.uk/fbn/index.html

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.google.com www.gstatic.com www.googletagmanager.com stats.g.doubleclick.net newcastle.gi www.newcastle.co.uk online.newcastle.co.uk dax.comscore.eu www.symantec.com t1.stormiq.com *.fls.doubleclick.net staticxx.facebook.net fls.doubleclick.net *.tradedoubler.com ssl.google-analytics.com apis.google.com platform.twitter.com js.stormiq.com tracking.dc-storm.com uk.sitestat.com www.googleadservices.com use.typekit.net dev.visualwebsitedeveloper.com dev.visualwebsiteoptimizer.com fordeu.d3.sc.omtrdc.net maps.googleapis.com tagmanager.google.com cdn.inspectlet.com gateway5.whoson.com connect.facebook.net static.ads-twitter.com www.googleadservices.com 4270844.fls.doubleclick.net gb-gmtdmp.mookie1.com secure.adnxs.com track.omguk.com d.impactradius-event.com analytics.twitter.com eforms.paragon-group.co.uk ad.doubleclick.net pbfclick.co.uk googleads.g.doubleclick.net connect.facebook.net www.google.co.uk pubads.g.do
strict-transport-security
max-age=31536000

Linked from (1)