ongo.co.uk
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- jQuery
- 3.5.1
- Analytics
-
- Google Analytics
- Google Tag Manager
- Ads
-
- Google Ads (DoubleClick)
- Meta Pixel
- Social widgets
-
- Twitter Widget
Third-party hosts loaded (14)
- www.google.com×3
- www.googletagmanager.com×3
- ajax.googleapis.com×2
- apis.google.com×2
- cdn.lordicon.com×2
- connect.facebook.net×2
- platform.twitter.com×2
- staticxx.facebook.com×2
- stats.g.doubleclick.net×2
- syndication.twitter.com×2
- www.google-analytics.com×2
- www.google.co.uk×2
- api.reciteme.com×1
- hb.wpmucdn.com×1
Social
Contact
- Address
- Ongo House, High Street, DN15 6AT, Scunthorpe
Registration
- Registrar
- 123-Reg Limited t/a 123-reg
- Created
- 2006-07-30
- Expires
- 2027-07-30 435 days left
- Updated
- 2024-08-13
- Name servers
-
- ns27.domaincontrol.com.
- ns28.domaincontrol.com.
DNS records live
- NS
-
- ns27.domaincontrol.com
- ns28.domaincontrol.com
- MX
-
- 10 eu-smtp-inbound-1.mimecast.com
- 10 eu-smtp-inbound-2.mimecast.com
- TXT
-
Show 6 TXT records
43o897tun3a9h5fmmgf0ltegcsd5d9mmh5rot761mkrt5j73kv6saccess-domain-verification=3dca8b5ddbefd814733da146d5ed65401f72678d6ada80b1a4338812d30ea6d80ed1fe018a62a72d0c41264a1fa929e89fa89db6bdJ9q1zz9wLEcUQZ0B3kjlI6F3C0mUUVo600Fs+tUQhZmIeLO0cETVbr/J/AWCUc6tcZDS/ARCDRuDdRUQEBIFuA==access-domain-verification=1d607ecfe8111747712319f44cd25ab56010ca5f93d615eb0144cea3816e7992
- Verified for
-
- Apple
- DocuSign
- Microsoft 365
- OpenAI
- Twilio
Email authentication partial
- SPF
-
v=spf1 mx a include:eu._netblocks.mimecast.com ip4:81.145.170.132 ip4:109.235.151.110 ip4:31.15.107.206 a:tracker-campaigner.com ip4:51.141.46.182 a:tracker-sequencer.com ip4:51.141.53.110 include:_spf.qemailserver.com include:servers.mcsv.net include:mailrelay.t1cloud.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:10c0e5e429dd601@rep.dmarcanalyzer.com; ruf=mailto:10c0e5e429dd601@for.dmarcanalyzer.com; fo=1;policy: none (monitoring only) - DKIM
-
- k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - mail:
v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDy4YJFuPtPUltio3lGMj4nN560DTavZlA41OLV4SIwhBgp1oLo/itQHVKZXP+aeOj/WZTmCckHiPN/C…
selectors probed - k1:
Certificate (current)
E7
Expires in 72 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
sameorigin- permissions-policy
accelerometer=(self), autoplay=(self), camera=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), usb=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://ajax.googleapis.com https://api.reciteme.com https://events.reciteme.com https://assets.app.futr.ai https://cdn.lordicon.com https://www.google.com https://www.gstatic.com https://talkdeskchatsdk.talkdeskapp.com; connect-src 'self' https://api.mixpanel.com https://bot.futr.ai https://cdn.lordicon.com https://assets.app.futr.ai https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://api.talkdeskapp.eu https://api.reciteme.com https://events.reciteme.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://api.reciteme.com; font-src 'self' https://fonts.gstatic.com- strict-transport-security
max-age=2592000