orderwise.co.uk
HTML metadata
Technology
- CMS
- Drupal
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (3)
- cms.forterro.com×29
- app.usercentrics.eu×1
- www.googletagmanager.com×1
Contact
- Phone
Registration
- Registrar
- OVH
- Created
- 2000-05-17
- Updated
- 2024-05-22
- Name servers
-
- dns105.ovh.net.
- ns105.ovh.net.
DNS records live
- NS
-
- dns105.ovh.net
- ns105.ovh.net
- MX
-
- 0 orderwise-co-uk.mail.protection.outlook.com
- TXT
-
Show 11 TXT records
google-site-verification=dqhWyqL-buDGgc4tCMlkbPPuZ3RvWSGgpaj7uxkUgacMS=ms62320545google-site-verification=HXOkX4gzJ5LhfR4FK9kwqzF4ceCwGiuzKoUDkduDiXogoogle-site-verification=H9Vzj0gDb7xR1be_H_QD-mTegdj125M9jiKGHRfJut8docusign=6e5d429f-7a86-4191-a4f9-6d9d57d5e100citrix-verification-code=ed9f38fa-fe9e-4a38-94b0-889f3da72222pardot1039003=06294fb4c8947147cc0d8f76fdcc3f3c4cb38fc47bdcb0fcbc8ad0cb28b65421atlassian-sending-domain-verification=1cb03607-1a27-4294-8e30-0e6f4d848009atlassian-domain-verification=Y0ToDkaRBGD7Y12Jaz9DVPZ2flw1LV4ShDaFaYMmNXtbD8WCeNxoz6LoDEB4/lCknotion_verify_bj4Q9f9E6vhuUcMyPy5qWQoKhnBN96nFj8wPXAoL0Ch5chtiooH9xZF7h98pyctZmacW38MS=ms73872427
Email authentication partial
- SPF
-
v=spf1 ip4:139.162.225.91 ip4:109.169.49.109/32 ip4:82.20.69.137/32 ip4:88.80.191.84 include:spf.protection.outlook.com include:_spf.atlassian.net include:servers.mcsv.net include:6692416.spf02.hubspotemail.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:b0g1vph657@rua.powerdmarc.com; ruf=mailto:b0g1vph657@ruf.powerdmarc.com; fo=1;policy: none (monitoring only) - DKIM
-
Show 4 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTsE8qwum/G1mN+CDgZb1IOrBVWdGaXJHbXCnV2AI5QbTHdUWoPL139LWr/9/S+A5y/2vmSsNq4cRM… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1gU64wM331J2x42nJ5l0VWV9mz2yyXOQwlgqvQ5eOkANWTV43m7GSCUU9MBBKHDpm6+8o9nY+5vm506tZ… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8tvSmzHnj/KkHIVAuonmai05ZFiat3Js8GETYTxg0Pfb3773i53A56TIx89vrodwSgVPFTQFqQ1Tg/KOpQM6YlC…
selectors probed - selector1:
Certificate (current)
R13
Expires in 85 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'nonce-2da329aaf95878c29747' hubspot-forms-static-embed.s3.amazonaws.com *.vimeo.com api.usercentrics.eu *.youtube.com *.hsforms.net *.hsforms.com *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hscollectedforms.net *.hsleadflows.net *.google-analytics.com *.googletagmanager.com *.analytics.google.com www.google.com www.gstatic.com www2.123insight.com pages.123insight.com 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; style-src 'self' 'unsafe-inline' hubspot-forms-static-embed.s3.amazonaws.com *.vimeo.com api.usercentrics.eu *.youtube.com *.hsforms.net *.hsforms.com *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hscollectedforms.net *.hsleadflows.net *.google-analytics.com *.googletagmanager.com *.analytics.google.com www.google.com www.gstatic.com www2.123insight.com pages.123insight.com; img-src * blob: data:; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; connect-src *; frame-src *; object- strict-transport-security
max-age=31536000; includeSubDomains; preload