harmonystore.co.uk
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (8)
- www.powr.io×2
- cdn.jsdelivr.net×1
- chimpstatic.com×1
- js.stripe.com×1
- widget.trustpilot.com×1
- www.dwin1.com×1
- www.facebook.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- GoDaddy.com, LLC.
- Created
- 2011-05-18
- Expires
- 2028-05-18 728 days left
- Updated
- 2026-05-19
- Name servers
-
- danica.ns.cloudflare.com.
- norm.ns.cloudflare.com.
DNS records live
- NS
-
- danica.ns.cloudflare.com
- norm.ns.cloudflare.com
- MX
-
- 0 harmonystore-co-uk.mail.protection.outlook.com
- 10 _dc-mx.42149cbed747.harmonystore.co.uk
- TXT
-
_acme-challenge.harmonystore.co.uk CNAME gw7ii6rifbi25ghi2h45hj4vlzrl6rf4fyd7lapyhgvkpq2qg3sq_acme-challenge.www.harmonystore.co.uk CNAME k6pywcy6z4nkwu2nvahlloxr2436jfwqhfvkg7s25brno7km7dya
- Verified for
-
- GlobalSign
Email authentication partial
- SPF
-
v=spf1 include:spf.mandrillapp.com a mx ptr ip4:185.66.112.167 ip4:162.13.191.6 ip4:37.59.0.129 ip6:2001:41d0:8:5381:: ip4:185.184.248.0/22 ip6:2a0b:4580::/32 include:mailgun.org include:spf.protection.outlook.com ip4:92.63.134.160/27 include:servers.mcsv.net -allstrict (-all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
Show 4 DKIM selectors
- selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDl//LeI81A3GrrVnC3rRGuZuHGJBAVSoINNCSk4SZc1fkqAw3+1k6vwO/hOwrsaUA4g/Mv+aQq5WUae5FjVR… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAYg+Kz3zt84XsiZXh6TzT9oLkIkoeAeQnW1VLWQ08OCfcvVI9nk4PDsPicolng2Vg7gTGVMNmU002yPAU… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroJPGaNPVYuEZZQed7eu2nEgDgAuDUW+hMdniPz6JNVXvYer+4d+gvbwfbWltL3vFqEjphahNQ7s0/2VbA…
selectors probed - selector2:
Certificate (current)
WE1
Expires in 61 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- findings
-
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests;- strict-transport-security
max-age=31536000; includeSubDomains- content-security-policy-report-only
font-src fonts.gstatic.com use.typekit.net *.stripe.com *.google.com *.sagepay.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com js.klevu.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com *.stripe.com *.google.com *.sagepay.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com/ *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.c