indexo.dev

qbeautomotiveprotection.com

.com crawl

First seen 2026-05-15 · Last seen 2026-05-15 · ok HTTP/1.1 200 568 ms crawled 2026-05-20

GB · 193.239.33.16 · AS202466 QBE Management Services (UK) Limited

Reputation 100/100

Classifying

HTML metadata

Title
QBE Automotive Protection - QBE Automotive Protection
Description
QBE Automotive Protection works around the globe, supporting clients to drive customer loyalty and retention through data science. Learn more and discover our range.
Language
en

Open Graph

title
QBE Automotive Protection
site name
QBE Automotive Protection
description
QBE Automotive Protection works around the globe, supporting clients to drive customer loyalty and retention through data science. Learn more and discover our range.

Technology

Server
Microsoft-IIS
CMS
Gatsby
Social widgets
  • Vimeo Embed

Third-party hosts loaded (1)

  • player.vimeo.com×1

Social

Registration

Registrar
CSC Corporate Domains, Inc.
Created
2023-02-15
Expires
2027-02-15 270 days left
Updated
2026-02-11
Name servers
  • a1-117.akam.net
  • a10-64.akam.net
  • a11-64.akam.net
  • a22-66.akam.net
  • a26-66.akam.net
  • a3-65.akam.net

DNS records live

NS
  • a1-117.akam.net
  • a10-64.akam.net
  • a11-64.akam.net
  • a22-66.akam.net
  • a26-66.akam.net
  • a3-65.akam.net
Verified for
  • Google

Email authentication no MX

SPF
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

Thawte TLS RSA CA G1
from 2026-03-18 to 2026-10-03
Expires in 135 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://qbeautomotiveprotection.com/en/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self' 'nonce-jEPR5GdVSvsb8api3h7dH6l68Th5jmVpaca0r3g535k=' ;script-src-elem 'self' www.google.com/recaptcha/api.js www.googletagmanager.com cdn.cookielaw.org c.disquscdn.com qbeeurope.disqus.com links.services.disqus.com *.licdn.com assets.juicer.io www.juicer.io server-side-tagging-w333dtewla-uc.a.run.app server-side-tagging.qbeeurope.com server-side-tagging.qbe.dk server-side-tagging.qbe.se server-side-tagging.qbefrance.com server-side-tagging.qbeespana.com server-side-tagging.qbeitalia.com server-side-tagging.qbe.de server-side-tagging.qbecanada.com server-side-tagging.qbenederland.com server-side-tagging.qbe.ae server-side-tagging.britishmarine.com server-side-tagging.qbere.com server-side-tagging.qbeautomotiveprotection.com server-side-tagging.qbeim.com server-side-tagging-tagging-w333dtewla-uc.a.run.app * 'unsafe-inline' https://*.mypurecloud.ie https://*.nr-data.net https://*.newrelic.com https://*.euw1.pure.cloud https://ad.doubleclick.net www.googleadservices.com
strict-transport-security
max-age=31536000

Links to (1)

Linked from (1)