mymacgregors.co.uk
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- Iubenda
Third-party hosts loaded (3)
- api-mgis.macgregorschoolwear.co.uk×11
- www.googletagmanager.com×2
- embeds.iubenda.com×1
Social
Contact
- Phone
- Address
- Street One, 45828, Example area, OH
Registration
- Registrar
- eUKhost Ltd t/a eukhost LTD
- Created
- 2024-10-14
- Expires
- 2026-10-14 146 days left
- Updated
- 2026-03-18
- Name servers
-
- igor.ns.cloudflare.com.
- pam.ns.cloudflare.com.
DNS records live
- NS
-
- igor.ns.cloudflare.com
- pam.ns.cloudflare.com
- MX
-
- 0 mymacgregors-co-uk.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication weak
- SPF
-
v=spf1 ip4:5.77.32.186 include:spf.protection.outlook.com -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Entrust DV TLS Issuing RSA CA 2
Expires in 127 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
ALLOW-FROM https://macgregorschoolwear.co.uk/,https://portal.tradecentric.com,https://external-assets.test.cdn.v-psp.com,https://industrial.amla.io/- permissions-policy
camera=(self), fullscreen=(self), geolocation=(self)- x-content-type-options
nosniff- content-security-policy
script-src blob: 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn https://www.google.com/recaptcha/api.js https://www.gstatic.com https://.synchronycredit.com https://synchronycredit.com https://www.googleadservices.com https://static-na.payments-amazon.com https://payments-amazon.com www.googletagmanager.com https://payments-sandbox.amazon.com https://localhost:44322/ .google-analytics.com *.osano.com *.jsdelivr.net .authorize.net *.cybersource.com *.braintreegateway.com *.googleapis.com 'unsafe-inline' 'unsafe-eval' connect-src 'self' https://payments.amazon.com/ https://apay-us.amazon.com/ https://payments-sandbox.amazon.com/ https://static-na.payments-amazon.com/ https://www.google-analytics.com/ https://tattle.api.osano.com/ https://consent.api.osano.com https://macgregorschoolwear.co.uk/ https://industrial.amla.io/ https://api-mgis.macgregorschoolwear.co.uk/ https://payment-mgis.macgregorschoolwear.co.uk/ ht- strict-transport-security
max-age=31536000; includeSubDomains; preload