loaf.coop

.coop user

First seen 2026-05-11 · Last seen 2026-05-11 · ok HTTP/1.1 200 981 ms crawled 2026-05-11

US · 151.101.130.159 · AS54113 Fastly, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

sector food type homepage

HTML metadata

Title

Loaf – Bringing Back Real Food

Description

Loaf Bakery and Cookery School Loaf is a proudly co-operative-run bakery and cookery school based in Stirchley, South Birmingham since 2009. We aim to build community through real food and healthy living in Birmingham. Our bread and pastries are freshly baked on site along with hearty lunches for the workers of Stirchley, while next door […]

Language

en-GB

Generator

WordPress 6.9.4

Canonical

https://loaf.coop/

Feeds

Open Graph

url: https://loaf.coop/
title: Home
locale: en_GB
site name: Loaf
description: Loaf Bakery and Cookery School Loaf is a proudly co-operative-run bakery and cookery school based in Stirchley, South Birmingham since 2009. We aim to build community through real food and healthy living in Birmingham. Our bread and pastries are freshly baked on site along with hearty lunches for the workers of Stirchley, while next door […]

Technology

CDN: Fastly
Server: Flywheel
CMS: WordPress

Third-party hosts loaded (2)

ajax.googleapis.com×2
gmpg.org×1

Social

Contact

Email

Registration

Registrar

Domains.coop Limited

Created

2022-05-11

Expires

2027-05-11 356 days left

Updated

2026-03-29

Name servers

ns1.messagingengine.com
ns2.messagingengine.com

DNS records live

NS

ns1.messagingengine.com
ns2.messagingengine.com

MX

10 in1-smtp.messagingengine.com
20 in2-smtp.messagingengine.com

Email authentication partial

SPF: v=spf1 include:spf.messagingengine.com ?all
neutral (?all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-05-06 to 2026-08-04

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://loaf.coop/

present

x-content-type-options
referrer-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff