osb.co.uk

HTML metadata

Title: Financial services | OSB Group
Description: A UK listed bank supporting underserved segments of the mortgage market, delivering specialist lending and retail savings through our industry leading brands.
Canonical: /

Open Graph

url: /
title: Financial services | OSB Group
description: A UK listed bank supporting underserved segments of the mortgage market, delivering specialist lending and retail savings through our industry leading brands.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (4)

cdn-ukwest.onetrust.com×2
html.investis.com×1
otp.tools.investis.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc

Created

2007-02-26

Expires

2027-02-26 282 days left

Updated

2026-02-22

Name servers

dns1.cscdns.net.
dns2.cscdns.net.

DNS records live

NS

dns1.cscdns.net
dns2.cscdns.net

MX

20 eu-smtp-inbound-1.mimecast.com
20 eu-smtp-inbound-2.mimecast.com

TXT

Show 19 TXT records

openai-domain-verification=dv-wm5Py8rQGFruzNHHsSM6cuNs
duo_sso_verification=33IzMSUzwEkqd8zuofTxXmrtQAsoLhYLAII1mX03Q3dmGTPqIw6rjQJaSEfXoej4
cisco-ci-domain-verification=57ce9f835a6ad305d2f6e939ab53046fe005d60b43b304239bd2ded3a6443248
docusign=90d72a8f-3bcb-453c-a6bd-8f0ec8b9b866
openai-domain-verification=dv-t13ybS87YMKQB4RbE3Qwmlku
atlassian-domain-verification=zzCksXFSz27enra23p7lIruZHvUMLQO0uHDTUnAS4tjKxJe8B47uktCvRzT5pQTv
sqsucb9qh11n7e0rbbldbn351o
MS=ms27103081
v=spf1 include:_netblocks.icims.com include:eu._netblocks.mimecast.com include:_spf.salesforce.com include:_spf.atlassian.net include:dayforcehcm.com include:_spf.psm.knowbe4.com -all
p2r30fvuem7rbhsp56desot35
knowbe4-site-verification=6ff646d3f514c3094bc15f4ca45eef1c
atlassian-sending-domain-verification=68294dd6-1bac-4568-a6be-be27035e8163
0ed1fe018a42b41eed7f064910ae61a24d1fbf3c7d
asv=621ae3b6e7941bacc1a829e5583d8475
_purw3s1r8jizmxbak5ihaweo4q5eyrt
n0bqhgian31n6ljcojecitjr0u
MY1yj8me1u5n3AR68D9ra3Rd2//q6TxiZ7KRxkwONUSHs6O0FfnCom/9G7MbjFN8gcRaR5abBD1de6Og/2+kiA==
docusign=6959d23b-f746-4ba1-9a1d-8eace21629ec
7gk0537d99v9uhc6u99g2snbac

Certificate (current)

WE1

from 2026-03-07 to 2026-06-05

Expires in 16 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://osb.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' packages.umbraco.org our.umbraco.org cdn-ukwest.onetrust.com googletagmanager.com privacyportal-uk.onetrust.com cookiepedia.co.uk geolocation.onetrust.com *.googletagmanager.com tagmanager.google.com google-analytics.com *.google-analytics.com cdn.cookielaw.org cookie-cdn.cookiepro.com *.clarity.ms c.bing.com dev.visualwebsiteoptimizer.com *.visualwebsiteoptimizer.com googleads.g.doubleclick.net www.google.co.uk *.google.co.uk widget.trustpilot.com *.trustpilot.com js-eu1.hs-scripts.com *.hs-scripts.com js-eu1.hs-analytics.net js-eu1.hs-banner.com js-eu1.hscollectedforms.net js-eu1.usemessages.com c.clarity.ms *.clarity.ms track-eu1.hubspot.com c.bing.com api-eu1.hubspot.com *.hubspot.com player.vimeo.com *.vimeo.com www.youtube.com *.youtube.com cdn.mouseflow.com *.mouseflow.com api.postcodes.io *.postcodes.io js.hsforms.net *.hsforms.net *.visualwebsiteoptimizer.com app.vwo.com n.clarity.ms html.investis.com irs.tools.investis.com otp.tools.investis.com *.tools.i
strict-transport-security: max-age=1073741824; includeSubDomains