mfi.co.uk

.uk crawl

First seen 2026-04-13 · Last seen 2026-05-07 · ok HTTP/1.1 200 750 ms crawled 2026-05-07

GB · 20.90.207.56 · AS8075 Microsoft Corporation

Reputation 94/100 dmarc monitor-only

sector home type homepage

HTML metadata

Title: MFI | Online Furniture, Homeware & More
Description: Create the perfect home with MFI! Browse our wide range of products across furniture, homewares & home décor. Free UK delivery & next day options available.
Language: en
Canonical: https://www.mfi.co.uk

Open Graph

url: https://www.mfi.co.uk
title: MFI | Online Furniture, Homeware & More
site name: MFI
description: Create the perfect home with MFI! Browse our wide range of products across furniture, homewares & home décor. Free UK delivery & next day options available.

Technology

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×1
fonts.gstatic.com×1

Social

Registration

Registrar

123-Reg Limited t/a 123-reg

Created

1995-10-25

Expires

2026-10-25 159 days left

Updated

2025-10-22

Name servers

a1-68.akam.net.
a12-67.akam.net.
a13-64.akam.net.
a18-65.akam.net.
a2-66.akam.net.
a5-67.akam.net.

DNS records live

NS

a1-68.akam.net
a12-67.akam.net
a13-64.akam.net
a18-65.akam.net
a2-66.akam.net
a5-67.akam.net

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 5 TXT records

0ed1fe018a0a44a7c1b7db4f83aa335a151123f768
MS=ms91646039
pinterest-site-verification=0f1fec3fbfbeb52c560ee8679265cb2f
google-site-verification=0RnI8tM_I9aMlmWtjHGohyHep-HKMRfOOJsekyYpVSI
facebook-domain-verification=0sg2u7626ow3n8t1xuiw47nz7or2vq

Email authentication strong

SPF

v=spf1 ip4:109.68.33.0/24 mx a ip4:94.136.40.163 a:mailex.mailcore.me include:eu._netblocks.mimecast.com include:mail.zendesk.com include:spf.protection.outlook.com include:spf-uk.emailsignatures365.com include:emarsys.us include:trustpilotservice.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:itnotifications@victorianplumbing.co.uk

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-04-03 to 2026-10-19

Expires in 153 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.mfi.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' https: https://mfi.co.uk https://*.mfi.co.uk https://victorianplumbing.co.uk https://*.victorianplumbing.co.uk; script-src-elem 'unsafe-inline' 'strict-dynamic' 'nonce-3pkVdku+ojXFx1RHqE+Mfw=='; style-src 'self' 'unsafe-inline' https://mfi.co.uk https://*.mfi.co.uk https://victorianplumbing.co.uk https://*.victorianplumbing.co.uk use.typekit.net p.typekit.net fonts.googleapis.com cdn.taggstar.com assets.bounceexchange.com x.klarnacdn.net; font-src 'self' https://mfi.co.uk https://*.mfi.co.uk https://victorianplumbing.co.uk https://*.victorianplumbing.co.uk fonts.gstatic.com use.typekit.net p.typekit.net x.klarnacdn.net; frame-ancestors 'self';
strict-transport-security: max-age=31536000; includeSubDomains