iconography.co.uk

.uk crawl

First seen 2026-04-22 · Last seen 2026-05-16 · ok HTTP/1.1 200 1295 ms crawled 2026-05-15

GB · 185.181.118.23 · AS204436 Kualo Limited

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Iconography Ltd - specialising in eCommerce and omnichannel
Description: We are Iconography. A team of seasoned eCommerce and omnichannel specialists, a dedicated group of digital artisans. Home of the superbly crafted IXO Commerce
Language: en
Canonical: https://www.iconography.co.uk/

Open Graph

title: Iconography Ltd - specialising in eCommerce and omnichannel
description: We are Iconography. A team of seasoned eCommerce and omnichannel specialists, a dedicated group of digital artisans. Home of the superbly crafted IXO Commerce

Technology

Server: Apache

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

fonts.googleapis.com×2
secure.perk0mean.com×2
fonts.gstatic.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

123-Reg Limited t/a 123-reg

Created

1998-04-27

Expires

2029-04-27 1073 days left

Updated

2024-08-09

Name servers

ns63.domaincontrol.com.
ns64.domaincontrol.com.

DNS records live

NS

ns63.domaincontrol.com
ns64.domaincontrol.com

MX

1 iconography-co-uk.mail.protection.outlook.com

TXT

MS=ms56124802
v=DMARC1; p=none;

Email authentication partial

SPF

v=spf1 mx a ip4:52.56.186.225 ip4:82.69.75.176 ip4:185.67.232.52 ip4:89.197.50.182 ip4:78.129.138.88 include:spf.protection.outlook.com include:139571227.spf06.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFCd5Mq7WD4V+bPWrP6wGdFinuJ8ocXbJXnwzOxqoomYQC4QPjJ4KaGT8IT3uDOQBwhZH1lx7ZbXEdbhZHJ1…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R13

from 2026-03-31 to 2026-06-29

Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.iconography.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), payment=(), autoplay=(), sync-xhr=()
x-content-type-options: NOSNIFF
content-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.gstatic.com *.facebook.net *.googlecommerce.com *.addthis.com *.addthisedge.com *.licdn.com googleads.g.doubleclick.net secure.perk0mean.com *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com *.usemessages.com
strict-transport-security: max-age=31536000; includeSubDomains