gwr.com

HTML metadata

Language: en

Technology

CDN: Amazon CloudFront
Server: CloudFront

Third-party hosts loaded (1)

20984517a57a.849ddffa.eu-central-1.token.awswaf.com×1

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1995-05-31

Expires

2027-05-30 376 days left

Updated

2023-09-21

Name servers

udns1.cscdns.net
udns2.cscdns.uk

DNS records live

NS

udns1.cscdns.net
udns2.cscdns.uk

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 39 TXT records

_7rtw7skjdrhg5czvynq8x0gzs1lxjy0
_cbiw1um5f90qyjhjc7jmoz6r4br5wt0
have-i-been-pwned-verification=ad7521751bdf5e0711574bb7b45a36be
_ynf0jl2r5lxgsemk5ybz60mb8wh6fa9
_6ij7kgtlyem5v1nuz5jkpp66ymiyhek
_tvlujklq3oh6v4r3v3vasui22by8jx5
_cnuxhnmqmjlgpmmgshyq3s7xhf2n0h4
apple-domain-verification=0kPU3wQZlF204Ly8
_6xogon06q0j8ktbn6kj509y2u6pq5dt
_26lq7vud5zvm8ufbppxkuxwwb28gj4p
_m7r3vn1vhj8wbpcl4j0qorqvvca6a1w
_b8oioflylkigdcpe4dx2d40i9r7mlq6
_ry7xbkfcmesmwa6lhnt3gnjzuajkv87
5j2p259kgqjpz4s3gp8dz071207zht7y
_j1ed5vh3sdisj5nfjwydbkqb9saxaps
_42utf1vypc6rvcpcv25yspymoau0el0
_ve6p6e4ligzxxbx0gqu2t11s5kzcjxk
_8m220l3b3owhcxt83xyzxg8zliheti1
docusign=ca8ff4b8-7dbe-4c10-81d1-dafe51e68ebb
ffqmdcwt4c2hchkhpc7cfn808rhthj15
_633amaz3fe855t8qw7tcghwiutegu12
_k73vx9hsgk83qdnqxm7ohiy76vg3x6a
_u2f90yjapf8xpcfdp4vdoer17f5pj7b
_eqsfpofggnjiw6ngxy4yaum848ijs6i
_h9ur9a19vafue4p1wocgx0wd1wc3r9w
access-domain-verification=b9204a66a56094a5278f845636b3f30d9030e702af699c78d25f4ae6659c4b69
_a2jtff4xquu7nnax5k47101hgvq5g86
ms-domain-verification=cc814779-ffcd-45cf-af1a-d837ace56122
_7sn992cn6e25d6isrivqcvmpp9fz33t
_p7jv4sn80prjpsgbgh2virw7vmidhwo
2n979zxkdn6mhfv817rb1f5sj970l0d6
_q434gtto5cwi87g7yx2scmz4xz5q5yo
gwr.com-validation=679152
_71i9dgnm661u88qtap4vwsyeg9h5lfr
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDA0y2vOz7PpUM3pF+FugxCUmsMrwriRkLSShA8qewC0UxHULQON+K5Pz84v0P+8J+HQoy6dJ2fguZCkpjA3d1GvkHM2Kzp1cEXD8ajpOt2DhMhdRj7Tu805oBC5JysmeES4/HEhV5RyR0Qrq5QAxmFGwVhhqQlcHhIPJJm+sfPwIDAQAB
lmcvm69czd8hnmhj9bx22tg4n1563h2j
teamviewer-sso-verification=5520a12175554094b524e7d6c89d759f
_34kzq20j0qrtfsztjbyyzycvlgph5vo
facebook-domain-verification=j9sxqfhfdohb17vizuxh6ibvv4rs9t

Email authentication partial

SPF

v=spf1 ip4:94.236.83.186 ip4:92.54.186.162 ip4:104.40.157.68 ip4:104.40.184.178 ip4:40.68.172.96 ip4:193.240.183.247 ip4:193.240.181.53 ip4:176.32.230.6 ip4:198.245.93.14 ip4:134.213.212.162 ip4:176.32.230.17 ip4:178.33.209.237 ip4:52.212.225.31 include:spf.workfront.com include:spf.mandrillapp.com include:eu._netblocks.mimecast.com include:spf.tractivity.co.uk include:amazonses.com include:_spf.qualtrics.com include:spf1.webtis.net -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarcreport@gwr.com; ruf=mailto:dmarcreport@gwr.com; fo=1

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDV0n21f8U1BZ6tP4PAVQ0+EY1Kun/B0d4KKWFMALWSFB+16mmph5UEFnXs0aLln8b7ed9ruhA4rLJhrOR06x…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIRnOLEXkXmHaMUZr8QOuk2fRsgfWphkP9HFxxQcvqjg7NXoXuKq72gx2H4t1loeO76phWD5c8giztPzJj5lX/BhyhmxI…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJG4p/JYYwLUiYORDdp4ak+hv54xnK0bgME6uruB/hxFtt2KM4cgC1bKJIMlkk2c/IDJHXTy+1UX+3G1KP…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLKMN6s2gE9XA459N9AYjL1L8/fWbbwLCMp/nH0p4NoLtt+nfSPv7xYgmvStDtFsBM/iy8/OYpV/14ESDnGspcJX…

selectors probed

Certificate (current)

RapidSSL TLS RSA CA G1

from 2026-04-17 to 2026-11-02

Expires in 167 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://gwr.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: frame-ancestors https://www.gwr.com/ https://www.railhelp.co.uk/gwr/ https://railcards.gwr.com/ https://cloud.e.gwr.com https://rewards.gwr.com; report-uri https://tap2go.report-uri.com/r/t/csp/enforce
strict-transport-security: max-age=63072000; includeSubDomains; preload