polti.co.uk

HTML metadata

Title

Polti: cleaning and ironing with steam

Description

45 years of made in Italy passion for steam: Polti household appliances to clean the home and irons with boilers. Buy them online.

Language

en

Canonical

https://www.polti.co.uk

Translations

en ×3
de
es
fr
it
pt

Open Graph

url: https://www.polti.co.uk
title: Polti: cleaning and ironing with steam
site name: Polti (UK) Limited
description: 45 years of made in Italy passion for steam: Polti household appliances to clean the home and irons with boilers. Buy them online.

Technology

Server: Sucuri
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (10)

www.polti.com×21
nl.polti.com×1
www.dwin1.com×1
www.googletagmanager.com×1
www.polti-usa.com×1
www.polti.de×1
www.polti.es×1
www.polti.fr×1
www.polti.it×1
www.polti.pt×1

Social

Contact

Phone

911 1269 60

DNS records live

NS

ns1.livedns.co.uk
ns2.livedns.co.uk
ns3.livedns.co.uk

TXT

qszfjzn5tvhm8dlvdhqbl1t6tkkscvrr
qy9qk242yxw2ntkc7s5dscd3jc8r19nj

Email authentication no MX

SPF: not published
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

Starfield Secure Certificate Authority - G2

from 2026-05-14 to 2026-08-12

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.polti.co.uk/

present

content-security-policy
x-frame-options
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: upgrade-insecure-requests;, font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com www.polti.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.polti.com 'self' 'unsafe-inline'; frame-ancestors www.gst