indexo.dev

grovesjohnwestrup.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 358 ms crawled 2026-05-19

DE · 23.11.206.10 · AS20940 Akamai International B.V.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Home
Description
Introducing GrovesJohnWestrup Private Clients personal insurance for clients with unique and complex risks.
Language
en
Canonical
https://www.grovesjohnwestrup.com/en.html

Open Graph

url
https://www.grovesjohnwestrup.com/en.html
title
Home
description
Introducing GrovesJohnWestrup Private Clients personal insurance for clients with unique and complex risks.

Technology

Third-party hosts loaded (2)

  • assets.adobedtm.com×1
  • rum.hlx.page×1

Registration

Registrar
Easyspace Limited
Created
2018-01-19
Expires
2028-01-19 608 days left
Updated
2026-01-16
Name servers
  • a1-208.akam.net
  • a14-65.akam.net
  • a18-66.akam.net
  • a5-64.akam.net
  • a7-65.akam.net
  • a8-64.akam.net

DNS records live

NS
  • a1-208.akam.net
  • a14-65.akam.net
  • a18-66.akam.net
  • a5-64.akam.net
  • a7-65.akam.net
  • a8-64.akam.net
MX
  • 0 mx07-002b1401.pphosted.com
  • 0 mx08-002b1401.pphosted.com
Verified for
  • Microsoft 365

Email authentication weak

SPF
v=spf1 ip4:185.183.28.49 ip4:185.132.180.84 include:_spf1.munichre.com include:_spf2.munichre.com include:spf.protection.outlook.com include:3915868.spf06.hubspotemail.net ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA OV R36
from 2026-04-23 to 2026-11-08
Expires in 171 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.grovesjohnwestrup.com/en.html

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self), camera=(), microphone=(), autoplay=(self), fullscreen=(self "https://e.video-cdn.net")
x-content-type-options
nosniff
content-security-policy
default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; frame-ancestors 'self';
strict-transport-security
max-age=15768000 ; includeSubDomains

Links to (13)

Linked from (6)