mandg.com

HTML metadata

Title: International Savings and Investments – M&G plc
Description: At M&G, we work together with our clients, customers, colleagues, and communities to build a more secure future — driven by our purpose to give everyone real confidence to put their money to work.
Language: en
Canonical: https://group.mandg.com/

Open Graph

url: https://mandg-corp.cd.invdcloud-is.co.uk/
title: International Savings and Investments
site name: M&G plc
description: At M&G, we work together with our clients, customers, colleagues, and communities to build a more secure future — driven by our purpose to give everyone real confidence to put their money to work.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Social widgets

Vimeo Embed

Third-party hosts loaded (10)

cdn.jsdelivr.net×9
assets.investisdigital.com×4
idxdpplayer.myidx.cloud×2
irs.tools.investis.com×2
otp.tools.investis.com×2
viz.tools.investis.com×2
www.googletagmanager.com×2
cdnjs.cloudflare.com×1
player.vimeo.com×1
www.youtube.com×1

Social

Contact

Address: 10 Fenchurch Avenue, EC3M 5AG, London, United Kingdom

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1996-04-03

Expires

2027-04-04 320 days left

Updated

2026-03-31

Name servers

pdns1.cscdns.net
pdns2.cscdns.net

DNS records live

NS

dns1.cscdns.net
dns2.cscdns.net

MX

5 mx1.hc1445-87.c3s2.iphmx.com
5 mx2.hc1445-87.c3s2.iphmx.com

TXT

Show 59 TXT records

https://dbg1-sc9-weu-ma-ops-01.azurewebsites.net
_teiaic87hlx7tw07impika76fmt9uwp
onetrust-domain-verification=2abe69235cd94cefb0763cd1fb6a95b0
smartsheet-site-validation=V-14wMd08V8AHnivGAH3Lc1yVw6F-PaD
p1ulpgsvg4ed4aqehjcmmji2a7
817r3pv0t1o04vt71ep6jkkt29
00D4K0000037qs1=1TBQ2000000001d
atlassian-domain-verification=yVScidlZOC1Cei1twkxOUkTreoEy9QFgFvIaif8hmvEDtRbz3rlNPJ7VZdOss/6G
MS=ms61185285
3112840
extensis-domain-verification=ed97b06f-3ddd-408d-b5e9-8fb0e060d7df
pexip-portal-domain-verification=ab5db05a-f990-4134-a619-3a9623403ae5
00D200000000YcV=1TBQ20000000149
o84juc485ns0ptlf2njk2ok85j
_sspopfr7w0uitm2gp72asyel54e2k79
_nte7j58emc4kqhggvaw56hegxxusb6m
https://dbg1-sc9-neu-xc-search-01.azurewebsites.net
https://dbg1-sc9-weu-prc-01.azurewebsites.net
https://dbg1-sc9-weu-ma-rep-01.azurewebsites.net
wjFuOGYoqLPWagzd3fh68TmO9+3Ns9saBiEZct/uLzBEzuE8NWP95v7yPQMmzZnYyE8+e9HySw9N0x+i2ciGdw==
fdhha2te1o9mrq0jaepq6eit56
adobe-idp-site-verification=6564ec77cb7228864e15d3f78774f78c87369ad1a979397d1619fb8cbfac242c
cqZ7FaWfE2W/Z6QNohRWtO5atQUKBt3uA+WSIw0TxQVSAmLH07o1epVur0n8qjG03577Qc8Wbg61ec+bIRdw3g==
https://dbg1-sc9-weu-cm-01.azurewebsites.net
google-site-verification=kqvfr6iXMNT7plG4M40E2vsqmpM2kw-2Mn--1gDomW4
ZA=eMUuNPUPkOnl/UkR8mTCYw==
6i910jko951j87il8i2ar46ecg
apple-domain-verification=XSA86vnpOZAMHemG
https://dbg1-sc9-weu-cd-01.azurewebsites.net
https://dbg1-sc9-weu-pub-01.azurewebsites.net
https://dbg1-sc9-neu-xc-collect-01.azurewebsites.net
google-gws-recovery-domain-verification=52773820
https://dbg1-sc9-weu-xc-search-01.azurewebsites.net
gjiu7mq7jsmlg0h94b2i3ap2j6
_pki-validation.bondvigilantes.com
_globalsign-domain-verification=JT9ON3E0Nw3BAInp8ee7FhrD1YbqsjefcYFJmTJAiF
onetrust-domain-verification=54c1f33ee59140a785e724bf4734073a
pexip-ms-tenant-domain-verification=ab5db05a-f990-4134-a619-3a9623403ae5
https://dbg1-sc9-weu-xc-refdata-01.azurewebsites.net
https://dbg1-sc9-weu-rep-01.azurewebsites.net
hliv7qi00e9t4bs6mudnkode5k
kn5iecunhp2dgtif75ibqd6jr
633q6u8c27n5ha64dl6p93er10
jamf-site-verification=fAZrRHOz1ALf7OlQqyW8RQ
https://dbg1-sc9-weu-xc-collect-01.azurewebsites.net
2bo6nd80ke4cvu1qoujiftp60q
docusign=e5e3a7f3-b4bb-4d95-959a-65a9c9e8c667
d94uhai3861k6cb3ug22fuhips
google-site-verification=EWK3SjNRt92bZbf_LKQwhyIvgeq9tYbzoWzBZY0eF8g
google-site-verification=qTjiQYTYHIgs1ybIs5B6NWA7yBa5j7itPMoUT3FGXgA
r5l2vui8agueincll4ibaometb
docusign=fc3bfb2b-e447-4c04-88ba-d04fa1c66a13
_hwh27kqw3cnr1n42jog75rv0gfwdsec
google-site-verification=Dz2i6OaxVakcnUCOjQK9y3zzYQBtu4Kauwg-lPLZgJw
p6r9ho7sl9miq7sa6djqocf79h
infoblox-domain-mastery=4e4e79fa6f7c83a5a8d3bca4cbe18b433d6869693b8e7afeb6e1a2f12b6f7b577e
as=1483625869
00D1j0000008d7h=1TBds00000000hZ
https://dbg1-sc9-neu-xc-refdata-01.azurewebsites.net

Email authentication strong

SPF

v=spf1 include:_u.mandg.com._spf.dmarclyeu.com ~all

softfail (~all)

DMARC

v=DMARC1;p=quarantine;pct=100;rua=mailto:67ac7df654eaa@ag.eu.dmarcly.com;ruf=mailto:67ac7df654eaa@fo.eu.dmarcly.com;

policy: quarantine

DKIM

s1: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4t5gCV8UYSJ3saIvnse762WZNEj2Oy1w0UluwJ9F4uNJ3dCGRJe+yb4psGNv4CWrOJKaMSAVkqPV2MH2u3/J…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-07-08 to 2026-07-08

Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://group.mandg.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(),ambient-light-sensor=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), gyroscope=(), magnetometer=(), midi=(), payment=(), picture-in-picture=(self "https://www.youtube-nocookie.com"), publickey-credentials-get=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src *.myidx.cloud 'self' ajax.googleapis.com assets.investisdigital.com fonts.googleapis.com use.typekit.net google-analytics.com code.highcharts.com viz.tools.investis.com edge.api.brightcove.com *.brightcovecdn.com; script-src *.myidx.cloud 'self' 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' unpkg.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net sc.lfeeder.com api.reciteme.com ajax.googleapis.com connect.facebook.net player.vimeo.com www.youtube.com cdn.jsdelivr.net code.jquery.com otp.tools.investis.com use.typekit.net google-analytics.com www.google-analytics.com *.googletagmanager.com *.google.com *.gstatic.com code.highcharts.com viz.tools.investis.com cdnjs.cloudflare.com *.investisdigital.com *.invdcloud-is.co.uk; style-src *.myidx.cloud 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com unpkg.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net api.reciteme.com google-analytics.com fonts.go
strict-transport-security: max-age=15768000 ; includeSubDomains