lwtickets.co.uk
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- OneTrust
Third-party hosts loaded (8)
- lwt-test-new.s3.eu-west-1.amazonaws.com×34
- lwtheatres.co.uk×9
- cdnjs.cloudflare.com×4
- code.jquery.com×2
- maps.googleapis.com×2
- cdn-ukwest.onetrust.com×1
- cdn.by.wonderpush.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- 123-Reg Limited t/a 123-reg
- Created
- 2024-03-21
- Expires
- 2028-03-21 670 days left
- Updated
- 2026-03-22
- Name servers
-
- athena.ns.cloudflare.com.
- ray.ns.cloudflare.com.
DNS records live
- NS
-
- athena.ns.cloudflare.com
- ray.ns.cloudflare.com
- MX
-
- 10 mx1-eu1.ppe-hosted.com
- 20 mx2-eu1.ppe-hosted.com
- TXT
-
line-up-domain-verification-69hxp1=MZ1qhRgE8FgN6eINsYkZgFICjppe-09860486bac463d8d9b4e455d6f736b5dca5919f
- Verified for
-
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 include:_u.lwtickets.co.uk._spf.smart.ondmarc.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; pct=100; sp=none; rua=mailto:bdad7e99@inbox.ondmarc.com; ruf=mailto:bdad7e99@inbox.ondmarc.com; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600policy: none (monitoring only) · sp=none - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VjFlhTZyhXR2UVpo5KtWA1oUX0+5c9Fz1GFsG8zjERlQJ/Twm3V+umGPZawbhwAaARVsAXs7BArFN… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQptDjVQJyQnJSPObsrnuNf9Dmnyx1HJjH11xqEdedquW0P0ql8qM3K9HDW8pKVcap9CMMFAB94XCkSuNh… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHms1EIKMFNaKodMfzeQgQQKCnP2deS41KVxenAAwhtZcIQX3q7ouzY41+5qW5iANS0kNYjIbetbCnVclOpT5qgX…
selectors probed - selector1:
Certificate (current)
Cloudflare TLS Issuing ECC CA 1
Expires in 42 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- cross-origin-opener-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' https://*.lwtheatres.co.uk https://r1.dotdigital-pages.com https://*.youtube.com https://*.google.com https://td.doubleclick.net https://*.fls.doubleclick.net;- strict-transport-security
max-age=31536000; includeSubDomains; preload- cross-origin-opener-policy
same-origin-allow-popups