newcastle.co.uk

HTML metadata

Title: Newcastle Building Society | Savings, Mortgages, Newcastle Financial Advisers
Description: Connecting you with a better financial future. Newcastle Building Society, helping communities through savings, mortgages and more for over 150 years.
Language: en
Canonical: https://newcastle.co.uk/

Open Graph

url: https://newcastle.co.uk/

Technology

Server: volt-adc

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (4)

assets-eu-01.kc-usercontent.com×11
cdn-ukwest.onetrust.com×1
fonts.googleapis.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc

Created

1996-03-30

Expires

2028-03-30 679 days left

Updated

2026-01-22

Name servers

dns1.cscdns.net.
dns2.cscdns.net.

DNS records live

NS

dns1.cscdns.net
dns2.cscdns.net

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 6 TXT records

jNbjSOZhYwQ6D3ZXQnSY0qqY0dMZOH1gzZbSig5LHZY=
ttu4/qMNyfI6jMAt96fyg9d+X6BMoB4Jf+cA0ZBByFM=
jamf-site-verification=H0exx783_eUbHraCIs0U5w
citrix.mobile.ads.otp=2pnaauu3f9u3icd9otl1jdpb
ms=ms91405962
insomnia-validation=30d845c92234465883be1d14c6e7b0e697b67c2d8eb55a29b8e86e8f16a77a97

Verified for

Apple
Atlassian
Dynatrace
Figma
GlobalSign
Microsoft 365
Miro
OneTrust

Email authentication strong

SPF: v=spf1 ip4:207.126.144.0/20 ip4:85.133.46.2 ip4:82.109.167.206 ip4:81.145.135.3 ip4:213.210.16.63 ip4:163.164.76.3 ip4:46.32.238.1 ip4:213.212.108.38 ip4:213.212.84.156 include:eu._netblocks.mimecast.com include:everbridge.net include:ciphr247.com ~all
softfail (~all)
DMARC: v=DMARC1; p=reject; rua=mailto:36ceb496c2ac453@rep.dmarcanalyzer.com; ruf=mailto:36ceb496c2ac453@for.dmarcanalyzer.com; fo=1;
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

GlobalSign GCC R3 EV TLS CA 2025

from 2026-04-30 to 2026-11-15

Expires in 179 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://newcastle.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.test2.me *.onetrust.com bat.bing.com i.ctnsnet.com www.facebook.com connect.facebook.net www.google.com www.googleadservices.com googleads.g.doubleclick.net stats.g.doubleclick.net www.googletagmanager.com secure.adnxs.com smct.co *.whoson.com static.hotjar.com script.hotjar.com newcastle.jotform.com *.jotfor.ms app.kontent.ai cdnjs.cloudflare.com www.gstatic.com *.analytics.google.com *.google-analytics.com *.reciteme.com *.veritonic.com *.adsrvr.org snap.licdn.com px.ads.linkedin.com px.ads.linkedin.com/wa px4.ads.linkedin.com p.adsymptotic.com cdn.linkedin.oribi.io gw.linkedin.oribi.io dc.ads.linkedin.com sjs.bizographics.com *.niceincontact.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com *.jotfor.ms *.whoson.com *.reciteme.com *.niceincontact.com;img-src 'self' *.kc-usercontent.com assets.vouchedfor.co.uk www.googletagmanager.com www.google.co.uk *.jotfor.ms *.jotform.com data: *.whoson.com secure.adnxs.com www.facebook.co
strict-transport-security: max-age=31536000