payingtoomuch.com

HTML metadata

Title: PayingTooMuch | Get travel insurance the easy way
Description: PayingTooMuch is a travel insurance price comparison site and four-time award winner. Compare affordable holiday cover for the whole family
Canonical: https://www.payingtoomuch.com/

Technology

CDN: Cloudflare

Third-party hosts loaded (6)

cdnjs.cloudflare.com×4
widget.trustpilot.com×2
ajax.googleapis.com×1
cdn-pci.optimizely.com×1
cdn.jsdelivr.net×1
unpkg.com×1

Contact

Phone

Registration

Registrar

123-Reg Limited

Created

2000-01-07

Expires

2030-01-07 1327 days left

Updated

2025-09-24

Name servers

sage.ns.cloudflare.com
tessa.ns.cloudflare.com

DNS records live

NS

sage.ns.cloudflare.com
tessa.ns.cloudflare.com

MX

0 payingtoomuch-com.mail.protection.outlook.com

TXT

1863dhc56xl5h10bbr86vbrssxnz49ss
863dhc56xl5h10bbr86vbrssxnz49ss
MS=ms2658027v=spf1 inclu1

Verified for

GlobalSign
Google
Meta

Email authentication strong

SPF

v=spf1 ip4:65.52.145.23 ip4:194.72.135.71 ip4:13.111.21.129 ip4:194.72.135.67 ip4:195.26.90.71 ip4:54.243.46.120 ip4:213.131.166.115 ip4:31.22.40.27 ip4:195.26.90.64 ip4:195.26.90.72 include:trustpilotservice.com include:spf.protection.outlook.com include:mailsub2.hostvue.com include:mail.zendesk.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; fo=1; rf=afrf; ri=3600; rua=mailto:a2ef289d5eb749f985bcb8e2c89244ae@dmarc-reports.cloudflare.net,mailto:261af671@inbox.ondmarc.com,mailto:dmarc_agg@dmarc.everest.email; ruf=mailto:261af671@inbox.ondmarc.com,mailto:dmarc_fr@dmarc.everest.email;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6owk/JCQgOdh+DP0Fs2+CsudxN6SRRL2TcE1RS44QPvPCBwGF0rYxYUkcdejSeYqES+wSOik7jRSUuGTJtz…

selectors probed

Certificate (current)

WE1

from 2026-05-10 to 2026-08-09

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.payingtoomuch.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: data: 'self' 'unsafe-inline' script.infinity-tracking.com *.infinity-tracking.com *.niceincontact.com ict.infinity-tracking.net *.payingtoomuch.com medical-screening.payingtoomuch.com *.herbstarsbuilding.com http://columbus-rebrand.payingtoomuch.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.tradedoubler.com *.tailwindcss.com *.niceincontact.com pagead2.googlesyndication.com cdn-assets-prod.s3.amazonaws.com *.infinity-tracking.com *.hotjar.com www.googleadservices.com *.onetrust.com js.monitor.azure.com medical-screening.payingtoomuch.com *.payingtoomuch.com *.google-analytics.com *.evergage.com qvdt3feo.com tags.srv.stackadapt.com extend.vimeocdn.com *.stackadapt.com woobox.com kit.fontawesome.com *.stackadapt.com *.mention-me.com static.zdassets.com cdn.jsdelivr.net *.optimizely.com widget.trustpilot.com analytics.freespee.com *.googletagmanager.com code.jquery.com www.clarity.ms widget-mediator.zopim.com *.google-analytics.com player.vimeo.com googlea
strict-transport-security: max-age=31536000; includeSubDomains

Links to (3)

Linked from (1)

staysure.co.uk×2