megabus.co.uk

HTML metadata

Title: megabus | Coach & Bus Trips | Plan Your Journey
Description: Find out more about coach travel with megabus. Browse flexible tickets, check routes and timetables for your next trip.
Language: en

Open Graph

url: https://www.megabus.co.uk/
title: megabus | Coach & Bus Trips | Plan Your Journey
site name: megabus
description: Find out more about coach travel with megabus. Browse flexible tickets, check routes and timetables for your next trip.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (9)

cdnjs.cloudflare.com×2
fonts.googleapis.com×2
consent.cookiebot.com×1
fonts.gstatic.com×1
maps.googleapis.com×1
use.typekit.net×1
www.dwin1.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

dahlia.ns.cloudflare.com
west.ns.cloudflare.com

MX

5 eu-smtp-inbound-1.mimecast.com
5 eu-smtp-inbound-2.mimecast.com

TXT

hkib75u49cbdo9auh8dfd6gceb
0ed1fe018afd4668d69353469f99c042fdde9cd2ce
4D4C62953CD14DB89A9CAD16D1C1D92D

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:78.32.210.242/28 ip4:18.169.44.73 include:_netblocks.mimecast.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:307542bc0f9e228@rep.dmarcanalyzer.com; ruf=mailto:307542bc0f9e228@for.dmarcanalyzer.com; fo=1;

policy: reject (enforced)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-03-22 to 2026-06-20

Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.megabus.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), midi=(self), microphone=(self), camera=(self), magnetometer=(self), gyroscope=(self), fullscreen=(self), payment=(self), sync-xhr=(self)
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://lantern.roeyecdn.com https://www.dwin1.com https://bat.bing.com https://api.tiles.mapbox.com/mapbox-gl-js/v2.14.1/mapbox-gl.js https://*.livechatinc.com https://iam.megabus.co.uk https://connect.facebook.net https://cdnjs.cloudflare.com https://www.google-analytics.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://*.cookiebot.com https://www.googletagmanager.com; worker-src blob: ; img-src 'self' https://lantern.roeye.com https://bat.bing.com https://*.livechat-static.com https://www.google.co.uk https://www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com https://*.cookiebot.com data:; frame-src 'self' https://td.doubleclick.net https://*.livechatinc.com https://iam.megabus.co.uk *.google.c
strict-transport-security: max-age=31536000; includeSubDomains; preload

Links to (5)

Linked from (1)

megabus.com×1