indexo.dev

flowersfromthefarm.co.uk

.uk crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1424 ms crawled 2026-05-19

GB · 178.159.11.137 · AS42831 UK Dedicated Servers Limited

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
Home - Flowers from the Farm
Description
Flowers from the Farm is a UK trade association promoting a financially and environmentally sustainable local cut flower industry.
Language
en-GB
Generator
WordPress 6.9.4
Canonical
https://www.flowersfromthefarm.co.uk/

Open Graph

url
https://www.flowersfromthefarm.co.uk/
title
Home - Flowers from the Farm
locale
en_GB
site name
Flowers from the Farm
description
Flowers from the Farm is a UK trade association promoting a financially and environmentally sustainable local cut flower industry.

Technology

Server
nginx
CMS
WordPress
Fonts
  • Google Fonts

Third-party hosts loaded (4)

  • cdn.jsdelivr.net×1
  • fonts.googleapis.com×1
  • fonts.gstatic.com×1
  • gmpg.org×1

Social

Contact

Phone

Registration

Registrar
Krystal Hosting Ltd
Created
2011-02-01
Expires
2027-02-01 255 days left
Updated
2025-08-22
Name servers
  • ns1.blacknovadesigns.co.uk.
  • ns2.blacknovadesigns.co.uk.

DNS records live

NS
  • ns1.blacknovadesigns.co.uk
  • ns2.blacknovadesigns.co.uk
MX
  • 0 flowersfromthefarm-co-uk.mail.protection.outlook.com
TXT
  • ca3-cb95675e65394bdd9435a83089ec27bc
  • ca3-50c3d8608dcd4511a183d4a910f3052c
Verified for
  • Google
  • Microsoft 365

Email authentication partial

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1;p=none;sp=none;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400
policy: none (monitoring only) · sp=none
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l1jZqqfgaBaj4P2OLQrFB/j85uHOpz9AkbYmbbFZTa1mU7/V3ksu60ZoHx6644Uv3iKXrHpzU2ETl…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ7kya8iolRLPjb4o1+5058op6DbnwR2DSi9oCN0s7OJf90j7XYMPT4dTWBLEkvzF2sD0ZY3THoFgB…
selectors probed

Certificate (current)

R13
from 2026-05-16 to 2026-08-14
Expires in 85 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.flowersfromthefarm.co.uk/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
connect-src *.google-analytics.com www.google-analytics.com *.analytics.google.com *.pixeledeggs.com *.cloudflare.com *.doubleclick.net *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.googleapis.com www.flowersfromthefarm.co.uk js.stripe.com; default-src 'self' 'unsafe-inline' www.googletagmanager.com js.stripe.com; font-src 'self' data: *.pixeledeggs.com fonts.gstatic.com js.stripe.com; frame-src 'self' data: www.google.com platform.twitter.com www.googletagmanager.com player.vimeo.com vimeo.com youtube.com www.youtube.com www.youtube-nocookie.com *.twitter.com *.cloudflare.com *.doubleclick.net js.stripe.com; img-src 'self' data: www.google-analytics.com www.gstatic.com www.google.co.uk www.googletagmanager.com *.gravatar.com *.vimeocdn.com *.ytimg.com *.twitter.com *.youtube.com *.pixeledeggs.com *.doubleclick.net *.gstatic.com *.googleapis.com js.stripe.com; media-src 'self' blob: data:; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' connect.facebook.net js.stripe

Links to (4)

Linked from (2)