indexo.dev

mypensiontracker.co.uk

.uk crawl

First seen 2026-05-14 · Last seen 2026-05-14 · ok HTTP/1.1 200 517 ms crawled 2026-05-19

GB · 20.49.149.3 · AS8075 Microsoft Corporation

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
Login - MyPensionTracker
Language
en

Technology

Server
Microsoft-IIS
CMS
Gatsby

DNS records live

NS
  • ns29.domaincontrol.com
  • ns30.domaincontrol.com
MX
  • 10 mxa-0058c301.gslb.pphosted.com
  • 10 mxb-0058c301.gslb.pphosted.com
TXT
Show 4 TXT records
  • 4lgnvaobmf6f8cs4n9hje4r48a
  • 3bgvhp23fl4l626ci06bsn9okb.
  • xrm0bb8gv1xq0cbkl47rnj7d6wzrrwdg
  • P0R0E60484
Verified for
  • Microsoft 365

Email authentication weak

SPF
v=spf1 mx a ip4:94.175.246.178/28 ip4:82.111.73.114/29 ip4:51.104.42.137/32 include:spf.protection.outlook.com include:spf.messagelabs.com include:spf.uk.exclaimer.net include:spf-0058c301.pphosted.com ~all
softfail (~all)
DMARC
not published
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJOfKXdpSJjENsvhpVm+pZsE/Pu8NxPVwXYPUx0MGmICKCq+MSprQB/fmxSvZ2WRC3fcMyRN47NpCa…
selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2
from 2025-08-04 to 2026-09-05
Expires in 107 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://mypensiontracker.co.uk/Pages/Static/Login.aspx?ReturnUrl=%2f

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (2)

Linked from (1)