pgl.co.uk

.uk crawl

First seen 2026-04-21 · Last seen 2026-05-18 · ok HTTP/1.1 200 3342 ms crawled 2026-05-15

GB · 4.158.115.70 · AS8075 Microsoft Corporation

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Adventure Holidays for all ages | PGL
Description: We create life enriching school trips and adventure holidays for memories that last a lifetime. And we've been doing so since 1957.
Language: en
Generator: Dynamicweb 8
Canonical: https://www.pgl.co.uk

Technology

Server: Microsoft-IIS
CMS: Joomla

Cookie consent

OneTrust

Third-party hosts loaded (2)

cdn.cookielaw.org×2
fast.fonts.net×1

Contact

Phone

//+44333 321 2100

Registration

Registrar

Cloudflare, Inc.

Created

1995-11-12

Expires

2026-11-12 176 days left

Updated

2025-08-14

Name servers

george.ns.cloudflare.com.
kira.ns.cloudflare.com.

DNS records live

NS

george.ns.cloudflare.com
kira.ns.cloudflare.com

MX

0 pgl-co-uk.mail.protection.outlook.com

TXT

Show 8 TXT records

MS=ms37808866
apple-domain-verification=hgEBomKDdqobL0kL
facebook-domain-verification=mz6h0inqamgqtfo7e1xqn7am0i05fl
google-site-verification=QMOKuoHwaszldEFIRnNFZcIuWXBmOiwRMrblcmqXQwI
knowbe4-site-verification=562fe9203d7282663eea8bc76d2ada0c
traction-guest=0ee92a0d-aadf-4702-9833-78810a0d1813
0ed1fe018aea1db59d3c7d43c28a79d435b485019e
Ffe+xK4qAzxSZaTzZOn/vL5rEFh3BEKTB51RlTxqNzAD9MMDZKz2tt4hHmt2BBO0aFOf5xmdB+d4/Ty7ki10ZA==

Email authentication strong

SPF

v=spf1 ip4:37.60.89.20 ip4:37.60.77.68 ip4:89.206.224.236 ip4:192.254.125.237 ip4:148.59.101.16/28 ip4:18.168.51.200 ip4:18.168.140.58 ip4:208.185.229.0/24 ip4:208.185.235.0/24 ip4:148.59.108.0/23 ip4:148.59.106.0/23 include:spf.protection.outlook.com include:accountis.net include:_spf.salesforce.com include:_spf.psm.knowbe4.com include:_spf.questback.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; sp=quarantine; rua=mailto:rua@pgl.co.uk; ruf=mailto:ruf@pgl.co.uk

policy: quarantine · sp=quarantine

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqhPPy0WOc6EFD7pq5WZv4j0bUFkLHflpSYDTh+lEVpwhbgHlFP+NvnunAvVqmgdTDaZcyS1dKqAu0Qf571w…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqtgYa9CtiDp+38LOfRkFzcAdH8P4C0BK40YNqaI7elO8dMgjUHrdsXIFFBVgUjuUTiKZdg1bfRt2Ic0O0…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnuLo9UoBqzFLmT+XpPMIFBjqz5svEzvZnv1grv+ybGsb7Y6gPI/SvCFsXch+ge7XHZq6rcWrOmQjHXk7/…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-05-07 to 2026-11-22

Expires in 186 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.pgl.co.uk/

present

strict-transport-security

findings

short HSTS max-age
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

strict-transport-security: max-age=7776000; includeSubDomains