lipoelastic.co.uk

HTML metadata

Title

LIPOELASTIC: Compression post-op expert | 20 years experience

Description

LIPOELASTIC - European expert and producer of post-operative compression garments & bras since 2002 - over 2.000.000 happy customers.

Language

en

Translations

cs
de-at
de-de
en
en-gb
es
fr
fr-be
it
nl

Open Graph

url: http://www.lipoelastic.co.uk/
title: LIPOELASTIC: Compression post-op expert | 20 years experience
site name: LIPOELASTIC: Compression post-op expert | 20 years experience
description: LIPOELASTIC - European expert and producer of post-operative compression garments & bras since 2002 - over 2.000.000 happy customers.

Technology

Server: nginx

Analytics

Google Tag Manager

Ads

Meta Pixel

Fonts

Google Fonts

Third-party hosts loaded (20)

connect.facebook.net×3
fonts.googleapis.com×3
api.tiles.mapbox.com×2
unpkg.com×2
www.google.com×2
www.lipoelastic.com×2
code.jquery.com×1
grwapi.net×1
widget.trustpilot.com×1
www.googletagmanager.com×1
www.lipoelastic.at×1
www.lipoelastic.be×1
www.lipoelastic.cz×1
www.lipoelastic.de×1
www.lipoelastic.es×1
www.lipoelastic.fr×1
www.lipoelastic.it×1
www.lipoelastic.nl×1
www.ppl.cz×1
yottlyscript.com×1

Social

Contact

Email

Phone

Address

8 Hornsey St, London, UK

Registration

Registrar

Ascio Technologies Corp. Denmark – filial af Ascio Technologies Corp. Canada

Created

2014-02-26

Expires

2027-02-26 282 days left

Updated

2026-02-11

Name servers

ns1.bdm.microsoftonline.com.
ns2.bdm.microsoftonline.com.
ns3.bdm.microsoftonline.com.
ns4.bdm.microsoftonline.com.

DNS records live

NS

ns1.bdm.microsoftonline.com
ns2.bdm.microsoftonline.com
ns3.bdm.microsoftonline.com
ns4.bdm.microsoftonline.com

MX

0 lipoelastic-co-uk.mail.protection.outlook.com

TXT

google-site-verification=LCffpfeJDm3rGs3rPnaB2CI0t6kZqvBVmOgA0PCU7Fw
mscid=lqvGL6gdCfQMTLivc1yMrvuCC36vdQZmiJiuKgVqoq8QlB3LT6UjCtyj+YHza4K7j5s+BYm+qAyZ+IiylP/kww==

Email authentication partial

SPF

v=spf1 a include:spf.protection.outlook.com include:mailgun.org include:spf.active24.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc-reports@lipoelastic.com; ruf=mailto:dmarc-forensic@lipoelastic.com

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA4a9nxFreGc2H5DOQCIJYgycxvA3CdkjCON+XLy46ICYckdNiE4cmQpZUkfiF5wU+CH3rtfAKDh5heCUrjc…

selectors probed

Certificate (current)

R13

from 2026-04-19 to 2026-07-18

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.lipoelastic.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: unsafe-url, strict-origin-when-cross-origin
x-frame-options: sameorigin, SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests; worker-src blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://lipoelastic.cz https://www.smartsuppchat.com https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://connect.facebook.net https://code.jquery.com https://cdn.foxentry.cz https://api.tiles.mapbox.com https://api.foxentry.cz https://www.feedbackcompany.com https://*.google.com https://www.heureka.cz https://widget-v2.smartsuppcdn.com https://widget-v3.smartsuppcdn.com https://*.googleapis.com https://www.seznam.cz https://www.zbozi.cz https://js.stripe.com https://polyfill.io https://widget.packeta.com https://static.xx.fbcdn.net https://api.tiles.mapbox.com https://www.googleadservices.com https://rec.smartlook.com https://yottlyscript.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://im9.cz https://www.googletagmanager.com https://openfpcdn.io https://*.cdninstagram.com https://consent.cookiebot.c
strict-transport-security: max-age=16416000; includeSubdomains
cross-origin-resource-policy: cross-origin