indexo.dev

hallforcornwall.co.uk

.uk crawl

First seen 2026-04-13 · Last seen 2026-05-07 · ok HTTP/1.1 200 4674 ms crawled 2026-05-07

GB · 18.169.151.82 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Home - Hall for Cornwall | Theatre & Arts in Cornwall
Language
en-GB
Generator
WordPress 6.8.2
Canonical
https://www.hallforcornwall.co.uk/
Feeds

Open Graph

url
https://www.hallforcornwall.co.uk/
title
Home - Hall for Cornwall | Theatre & Arts in Cornwall
locale
en_GB
site name
Hall for Cornwall | Theatre & Arts in Cornwall

Technology

Server
nginx
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Adobe Fonts
  • Font Awesome
Third-party hosts loaded (9)
  • hallforcornwall.s3.eu-west-2.amazonaws.com×50
  • cdnjs.cloudflare.com×10
  • webcomponents.spektrix.com×2
  • gmpg.org×1
  • hallforcornwall.suredigital.co.uk×1
  • unpkg.com×1
  • use.fontawesome.com×1
  • use.typekit.net×1
  • www.googletagmanager.com×1

Social

Contact

Phone
Address
rd of the Dance: 30 Years of Standing OvationsTue 22 - Sat 26 Sep 2026

Registration

Registrar
123-Reg Limited t/a 123-reg
Created
1999-09-15
Expires
2027-09-15 483 days left
Updated
2025-09-16
Name servers
  • colin.ns.cloudflare.com.
  • miki.ns.cloudflare.com.

DNS records live

NS
  • colin.ns.cloudflare.com
  • miki.ns.cloudflare.com
TXT
  • google-site-verification=sm3tNBiVxiscCbS-UVz43IVUlDiZwzOC22nDH-b8fQ4

Email authentication no MX

SPF
v=spf1 ip4:77.72.4.98 ip4:81.19.181.220 +a +mx +ip4:81.19.187.30 ?all
neutral (?all)
DMARC
v=DMARC1; p=reject
policy: reject (enforced)
DKIM
  • default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgHEvkDdQ0JJ054plSF6kZN+sB/qlrHI3CGru/9+dchd1g+VLzqCRm56fminKw6Obtxj1Qw5gOIflasi01v9…
selectors probed

Certificate (current)

R13
from 2026-04-30 to 2026-07-29
Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.hallforcornwall.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), microphone=(), camera=()
x-content-type-options
nosniff
content-security-policy
default-src 'self' https://*.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.pinterest.com https://addevent.com https://*.addevent.com https://*.cloudflareinsights.com https://cdn-cookieyes.com https://www.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://ajax.googleapis.com https://code.jquery.com https://*.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://platform.twitter.com https://connect.facebook.net https://static.hotjar.com https://script.hotjar.com https://cdn-ukwest.onetrust.com https://analytics.tiktok.com https://s.pinimg.com https://use.fontawesome.com https://webcomponents.spektrix.com https://*.youtube.com https://*.hallforcornwall.co.uk https://*.amazonaws.com https://pixel.byspotify.com https://static.trackedweb.net; style-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://*.jsdelivr.net https://fonts.googleapis.com https://use.fontawesome.com https://platform.twitter.com http
strict-transport-security
max-age=31536000; includeSubDomains; preload, max-age=31536000; includeSubDomains

Links to (5)

Linked from (2)