indexo.dev

lotify.uk

.uk crawl

First seen 2026-05-09 · Last seen 2026-05-09 · ok HTTP/1.1 200 2640 ms crawled 2026-05-15

US · 216.198.79.1 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Lotify - The Ultimate Dealer Network
Description
Source and sell used car stock directly with other verified UK car dealers. No auctions, no transaction fees. The ultimate dealer to dealer vehicle marketplace.
Language
en

Open Graph

title
Lotify - The Ultimate Dealer Network
description
Source and sell used car stock directly with other verified UK car dealers. No auctions, no transaction fees. The ultimate dealer to dealer vehicle marketplace.

Technology

CDN
Vercel
CMS
Next.js

DNS records live

NS
  • ns75.domaincontrol.com
  • ns76.domaincontrol.com
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • google-site-verification=rBI6qUZLKxFGpk1Vy1elDi7Vbu0qSfWLWKIAg4wRDOc
  • google-site-verification=8itRNZur9HJzc7qfu5slP2b5QHNTbnHyvmFvXegND8w

Email authentication partial

SPF
v=spf1 include:dc-aa8e722993._spfm.lotify.uk ~all
softfail (~all)
DMARC
v=DMARC1; p=none; pct=100; rua=mailto:dmarc@lotify.uk
policy: none (monitoring only)
DKIM
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7/G/jbE7W5O0VFxuwlHr1ozB2buyBJbwQCiExDhf4MGremj3CW6VedrWOf+FWfcHucokuWy5fbcHc…
selectors probed

Certificate (current)

R13
from 2026-03-31 to 2026-06-29
Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.lotify.uk/

present
  • strict-transport-security
  • content-security-policy-report-only
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-resource-policy
findings
  • missing Content Security Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
DENY
permissions-policy
camera=(), microphone=(), geolocation=(), payment=()
x-content-type-options
nosniff
strict-transport-security
max-age=63072000
cross-origin-resource-policy
same-origin
content-security-policy-report-only
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https://djvvcmtcebixhquvfpdg.supabase.co https://tools.applemediaservices.com https://play.google.com; connect-src 'self' https://djvvcmtcebixhquvfpdg.supabase.co wss://djvvcmtcebixhquvfpdg.supabase.co https://vitals.vercel-insights.com; frame-src https://www.facebook.com https://www.linkedin.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests

Linked from (1)