planetoffers.co.uk

HTML metadata

Title: Planet Offers | Planet Offers
Description: Planet Offers has limited stock, half price vouchers for family days out to incredible theme parks, zoos & safari parks. There's also plenty of restaurant deals, spa discounts, cheap wedding packages and much more. No sneaky catches.
Language: en

Technology

Server: Sucuri
CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (5)

556dcd72-7701-4fcf-99aa-1c623a3718be.edge.permutive.app×1
cdn.privacy-mgmt.com×1
chimpstatic.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ezra.ns.cloudflare.com
fish.ns.cloudflare.com

MX

10 planetoffers-co-uk.mail.protection.outlook.com

TXT

mandrill_verify.EGENVNo9lFJbH1mUtdv3bg

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:_u.planetoffers.co.uk._spf.smart.ondmarc.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:5352a03e@inbox.eu.redsift.cloud; ruf=mailto:5352a03e@inbox.eu.redsift.cloud; adkim=r; aspf=r; fo=0; rf=afrf; ri=3600

policy: reject (enforced) · sp=reject

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQaaZanzx7I0YMl3Y/4IMnypM4nsh+xu4rPUpcwjeJ9usO3nokZCmxRNKP6Sr0QUPokxsrBusgGzjL…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Starfield Secure Certificate Authority - G2

from 2026-05-12 to 2026-08-10

Expires in 81 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://planetoffers.co.uk/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

weak frame protection
weak content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: upgrade-insecure-requests;
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy-report-only: font-src *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.card