light-media.co.uk

HTML metadata

Title: Midlands Web Design Agency | Leamington Spa, Warwickshire | Award-Winning Web Development
Description: Multi award-winning web design and development agency based in the heart of Leamington Spa, Warwickshire CV32 5SZ. Our offices are local to Warwick, Kenilworth, Stratford-Upon-Avon, Coventry and Birmingham. Call us on 01926 313233.
Language: en
Generator: lmsitestarterduke 9.20170222.3.1743
Canonical: https://www.light-media.co.uk/

Technology

Server: C11

Fonts

Google Fonts

Third-party hosts loaded (3)

code.jquery.com×3
fonts.googleapis.com×2
www.google.com×1

Social

Contact

Phone

01926313233

Registration

Registrar

Easily Limited t/a easily.co.uk

Created

2004-11-10

Expires

2029-11-10 1269 days left

Updated

2024-09-12

Name servers

ns1-07.azure-dns.com.
ns2-07.azure-dns.net.
ns3-07.azure-dns.org.
ns4-07.azure-dns.info.

DNS records live

NS

ns1-07.azure-dns.com
ns2-07.azure-dns.net
ns3-07.azure-dns.org
ns4-07.azure-dns.info

MX

10 lightmedia-co-uk01c.mail.protection.outlook.com

Verified for

Google

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net include:spf.surveymonkey.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarclogs@light-media.co.uk

policy: quarantine

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIM+lEfSYo3ki8mmF/MACgyWTUjkz4FYQvJW96hCmWQmukP6DHML60mx5jh9qNTM5KfwIC1CSKenSiqSVMaa…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

R12

from 2026-05-08 to 2026-08-06

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.light-media.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=*, ambient-light-sensor=*, autoplay=*, battery=*, camera=*, cross-origin-isolated=*, display-capture=*, document-domain=*, encrypted-media=*, execution-while-not-rendered=*, execution-while-out-of-viewport=*, fullscreen=*, geolocation=*, gyroscope=*, keyboard-map=*, magnetometer=*, microphone=*, midi=*, navigation-override=*, payment=*, picture-in-picture=*, publickey-credentials-get=*, screen-wake-lock=*, sync-xhr=*, usb=*, web-share=*, xr-spatial-tracking=*, clipboard-read=*, clipboard-write=*, gamepad=*, speaker-selection=*, conversion-measurement=*, focus-without-user-activation=*, hid=*, idle-detection=*, interest-cohort=*, serial=*, sync-script=*, trust-token-redemption=*, window-placement=*, vertical-scroll=*
x-content-type-options: nosniff
content-security-policy: connect-src wss://*.hotjar.com *.hotjar.com wss://*.zoom.us *.zoom.us zoom.us *.google-analytics.com 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.light-media.co.uk *.googleapis.com *.google-analytics.com *.google.com *.gstatic.com *.youtube.com *.vimeo.com *.doubleclick.net *.hotjar.com walls.io *.zoom.us zoom.us code.jquery.com;
strict-transport-security: max-age=31536000; includeSubDomains