indexo.dev

iwoca.co.uk

.uk crawl

First seen 2026-04-20 · Last seen 2026-05-13 · ok HTTP/1.1 200 2402 ms crawled 2026-05-13

IE · 54.73.206.134 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Business Loans - Flexible Funding from £1K to £1,000,000
Description
Get a quick decision on iwoca business loans ranging from £1,000 to £1,000,000. Repay in 1 day to 24 months with no penalty for early repayment. Fast, flexible finance for UK businesses.
Language
en
Canonical
https://www.iwoca.co.uk

Open Graph

title
Business Loans - Flexible Funding from £1K to £1,000,000
description
Get a quick decision on iwoca business loans ranging from £1,000 to £1,000,000. Repay in 1 day to 24 months with no penalty for early repayment. Fast, flexible finance for UK businesses.

Technology

CDN
Cloudflare
Server
nginx
CMS
Gatsby
Analytics
  • Google Tag Manager
Cookie consent
  • OneTrust
Third-party hosts loaded (9)
  • cdn.prod.website-files.com×98
  • cdn-ukwest.onetrust.com×2
  • cdn.jsdelivr.net×2
  • signup-static.iwoca.com×2
  • cdnjs.cloudflare.com×1
  • d3e54v103j8qbb.cloudfront.net×1
  • dev.visualwebsiteoptimizer.com×1
  • widget.trustpilot.com×1
  • www.googletagmanager.com×1

Social

Contact

Email
Phone

Registration

Registrar
Gandi
Created
2011-10-03
Expires
2026-10-03 136 days left
Updated
2022-08-22
Name servers
  • ns-1461.awsdns-54.org.
  • ns-2027.awsdns-61.co.uk.
  • ns-442.awsdns-55.com.
  • ns-677.awsdns-20.net.

DNS records live

NS
  • ns-1461.awsdns-54.org
  • ns-2027.awsdns-61.co.uk
  • ns-442.awsdns-55.com
  • ns-677.awsdns-20.net
MX
  • 10 aspmx.l.google.com
  • 20 alt1.aspmx.l.google.com
  • 20 alt2.aspmx.l.google.com
  • 30 aspmx2.googlemail.com
  • 30 aspmx3.googlemail.com
TXT
Show 14 TXT records
  • MS=ms40739451
  • _i7n5qxfcyq3ve6jpuwdgljmktnsdyz2
  • access-domain-verification=023e92bd0f6d21552207d377a81353ee17a6bc4d3f25da08f9f2de776897d6e3
  • apple-domain-verification=PMgOp-lyRrc3bd5Fu8dIXMkez1rG66jbupxBqfH9wBM
  • apple-domain-verification=Xxxe3Q32kuEzsrSe
  • atlassian-domain-verification=b5s2EgcqfJLXmnpMlD345IbBVMGYYvGwxVI3Vn236GMYxNPMuWqeHFlXE+JXviJ6
  • google-site-verification=GrQ9owjd7NJKDGY9Zq46Gb3zG_NKtd4yZxblsYEFqJ4
  • google-site-verification=PLzB3I0qnVz1KSGTMAK0xHkdxHRqXq0glehK3BWWxks
  • mtc=ZjJjZWRkYWQtZDE0Ny00MWMyLTk0ZGEtMDMxYWZhYmM1MTU3
  • onetrust-domain-verification=bf597f2473eb4b5cb75a3682ff5a0ac3
  • slack-domain-verification=kpb3ZP6iYxg5tQnRaLBPTuOXpbU2zvQ9a84vGjUX
  • status-page-domain-verification=rykmxfgvkwk3
  • stripe-verification=e6501fcb1dd355a620856e09172a9d67507dcb40b08028e9952f0aef3e3df7db
  • CKO=cli_h36lvccuxyeefid4p42cezt5pu

Email authentication strong

SPF
v=spf1 include:_u.iwoca.co.uk._spf.smart.ondmarc.com include:6334445.spf05.hubspotemail.net ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:d1af1dd2@inbox.ondmarc.com; ruf=mailto:d1af1dd2@inbox.ondmarc.com; adkim=r; aspf=r; fo=0; rf=afrf; ri=3600
policy: reject (enforced) · sp=reject
DKIM
Show 6 DKIM selectors
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHFKX86KXjxKNxmawPzo6bh+Mg6NmuSES1lI3SmtfO4fFtNK8341L/06jxhw42zu574QeQCu2FQTx1…
  • selector1: v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCphuwd0XLVVHoDGcSQpTYVm2kDcdyPD4rvuvDaaQimKvTr2K1mlzTALEqFo0exuJRRmfHtPayq+Uoop/IRLuwx…
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZVy4aJejfNngtzaePuxg4n70lkkgau2ZvzLNW14fylIvIsUDpjCi2frOuTTJa1AfLHV3oCB7gkGa1XJqS…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6qYANWaDLhK+B7PQe6fTvRUK+HAUH3IkOLI5rLlEMudzFsWwsOZKaIXeOP5g+mal9JcnY7KFRLaaupgEBH26OTS…
  • smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…
selectors probed

Certificate (current)

Amazon RSA 2048 M01
from 2025-11-22 to 2026-12-21
Expires in 215 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.iwoca.co.uk/

present
  • strict-transport-security
  • content-security-policy-report-only
findings
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
strict-transport-security
max-age=31536000; includeSubDomains
content-security-policy-report-only
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://js.stripe.com https://*.js.stripe.com https://checkout.stripe.com https://connect-js.stripe.com https://*.googleapis.com https://www.googletagmanager.com https://*.google-analytics.com https://*.website-files.com https://d3e54v103j8qbb.cloudfront.net https://*.onetrust.com https://*.cookielaw.org https://*.visualwebsiteoptimizer.com https://*.iwoca.com https://widget.trustpilot.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://snap.licdn.com https://bat.bing.com https://cdn.amplitude.com https://www.redditstatic.com https://*.fullstory.com https://connect.facebook.net https://*.hs-scripts.com https://*.tiktok.com https://*.intercom.io https://*.hsadspixel.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hubspot.com https://*.doubleclick.net https://*.intercomcdn.com https://*.online-metrix.net https://cdn.datatables.net https://www.datadoghq-browser-agent.com https://*.dwin

Links to (10)

Linked from (1)