godirectwholesale.co.uk
HTML metadata
Technology
- Server
- Apache
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- www.googletagmanager.com×2
- code.jquery.com×1
Registration
- Registrar
- 123-Reg Limited t/a 123-reg
- Created
- 2023-06-30
- Expires
- 2026-06-30 40 days left
- Updated
- 2025-07-01
- Name servers
-
- ns1.stackdns.com.
- ns2.stackdns.com.
- ns3.stackdns.com.
- ns4.stackdns.com.
DNS records live
- NS
-
- ns1.stackdns.com
- ns2.stackdns.com
- ns3.stackdns.com
- ns4.stackdns.com
- MX
-
- 10 mail.protonmail.ch
- 20 mailsec.protonmail.ch
- TXT
-
protonmail-verification=4068e3b3d6fcddcc0d3d93f629b0a5660078256a
Email authentication weak
- SPF
-
v=spf1 include:_spf.protonmail.ch mx ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- s1:
v=DKIM1;k=rsa;h=sha256;g=*;n=;s=*;t=s;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtczhRxVisav9/OJMb+qVVnCIXnkmhr8Aka3RTQiqR3QgI/Ot4SHP6+aI…
selectors probed - s1:
Certificate (current)
R13
Expires in 77 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; child-src *; style-src * 'unsafe-inline';- strict-transport-security
max-age=63072000; includeSubDomains