itrworldtax.com

HTML metadata

Title: ITR World Tax - the guide to the world's leading tax law and accounting practices
Description: The ITR World Tax's financial and corporate law rankings for ITR World Tax - the guide to the world's leading tax law and accounting practices. The publication provides annual rankings and firm-by-firm editorial, including leading lawyers.

Open Graph

title: ITR World Tax - the guide to the world's leading tax law and accounting practices
description: The ITR World Tax's financial and corporate law rankings for ITR World Tax - the guide to the world's leading tax law and accounting practices. The publication provides annual rankings and firm-by-firm editorial, including leading lawyers.

Technology

CDN: Azure Front Door
CMS: Ghost

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

www.googletagmanager.com×2
cdn-cookieyes.com×1
code.jquery.com×1
fonts.googleapis.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2009-07-28

Expires

2026-07-28 69 days left

Updated

2025-07-24

Name servers

ns1-05.azure-dns.com
ns2-05.azure-dns.net
ns3-05.azure-dns.org
ns4-05.azure-dns.info

DNS records live

NS

ns1-05.azure-dns.com
ns2-05.azure-dns.net
ns3-05.azure-dns.org
ns4-05.azure-dns.info

MX

0 itrworldtax-com.mail.protection.outlook.com

TXT

Show 14 TXT records

0ed1fe018ae4e2adcb9b094b27be2e3d2db22c1563
r68frwdfh6d24s5cmfybbqm3ndzkrzcc
5ls9mm8xv5ltcfs0tkvdsqh4ngzl8pb8
sending_domain426822=204036ca8baee3d073413e67408a3732893890de23bcb11a12b38b0132fc7091
live-itrworldtax.azurewebsites.net
globalsign-domain-verification=4265BFB7145FEF6494108BB9E2CCA37C
knowbe4-site-verification=21c0473981197d872a604e170319f131
apple-domain-verification=PqeI58KvzW7I5BXH
_tieb2t7jl4b971n7a3or3ck3tadapfj
sending_domain1111133=f6f9e2f07c01d80056a171f19578e7b86b98f8f7784e6158372a382afeeb7aef
pardot1111133=d1f9eae1ef8a2ad23cff6960116f87604f44e60657471e48b166f4898510cab7
jm27af6ct9202ikkf9nauft0fn
iwt-live.ase-si-group-ext.p.azurewebsites.net
_globalsign-domain-verification=_Po9_1C1CqH46CDpmnk8DOPXISAEkvXqxcjK1KmZ2X

Email authentication strong

SPF

v=spf1 include:spf.uk.exclaimer.net include:spf.protection.outlook.com include:_spf.salesforce.com -all

strict (-all)

DMARC

v=DMARC1; p=reject;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21Gc4xXPrmDJ9JcBF5XczT7NIrjXsTMbswwA050GlT1bvaCIw60zrC5EGttyQ+53S4IUo7bAIlql4A…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIYNnq+W3jrmwjROapucAIUQd9YseFBWj0QiH/gR0HlUbKo96W1c68tQZlyaQA3Z0NA9/H96XYZ/sh…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-12-16 to 2026-06-17

Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://itrworldtax.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://tpc.googlesyndication.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-cookieyes.com https://*.adtrafficquality.google https://*.googlesyndication.com https://snap.licdn.com https://cdn.cookielaw.org https://www.brighttalk.com https://cdn.wisepops.com https://wisepops.net https://cdn.inspectlet.com https://platform.twitter.com https://s.ytimg.com https://www.youtube.com https://secure.cave9tape.com https://cdnjs.cloudflare.com https://connect.facebook.net https://d.adroll.mgr.consensu.org https://*.adroll.com https://munchkin.marketo.net https://www.google.com https://optimize.google.com https://cdn.ampproject.org https://www.googletagmanager.com https://tagmanager.google.com https://securepubads.g.doubleclick.net https://cdn.euromoneyapi.com https://js.revsci.net https://www.gstatic.com https://adservice.google.com https://adservice.google.rs https://www.google-analytics.com https://loader.wisepops.com https://sjs.bizographics.c
strict-transport-security: max-age=31536000; includeSubDomains