sarasinportal.co.uk

.uk crawl

First seen 2026-04-13 · Last seen 2026-05-20 · ok HTTP/1.1 200 1924 ms crawled 2026-05-06

US · 172.67.70.71 · AS13335 Cloudflare, Inc.

Reputation 100/100

sector tech type homepage

HTML metadata

Title: Sarasin Client Portal
Language: en

Technology

CDN: Cloudflare
CMS: Gatsby

Registration

Registrar

Ionos SE

Created

2020-12-15

Expires

2026-12-15 208 days left

Updated

2025-12-14

Name servers

sima.ns.cloudflare.com.
tadeo.ns.cloudflare.com.

DNS records live

NS

sima.ns.cloudflare.com
tadeo.ns.cloudflare.com

MX

5 mx00.ionos.co.uk
5 mx01.ionos.co.uk

TXT

v=spf1 -all

Certificate (current)

WE1

from 2026-05-02 to 2026-07-31

Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://sarasinportal.co.uk/mywealth-web/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src blob: wss: 'self' 'unsafe-inline' 'unsafe-eval' sarasinportal.co.uk mirror.sarasinportal.co.uk google-analytics.com *.google-analytics.com *.googleapis.com *.gstatic.com googletagmanager.com *.googletagmanager.com hotjar.com ws13.hotjar.com ws9.hotjar.com *.hotjar.com hotjar.io *.hotjar.io vc.hotjar.io typekit.net *.typekit.net unpkg.com *.unpkg.com youtube.com *.youtube.com vimeo.com *.vimeo.com sarasinstaging.wpengine.com *.sarasinstaging.wpengine.com sarasinandpartners.com *.sarasinandpartners.com; img-src data: 'self' 'unsafe-inline' 'unsafe-eval' sarasinportal.co.uk mirror.sarasinportal.co.uk google-analytics.com *.google-analytics.com *.googleapis.com *.gstatic.com googletagmanager.com *.googletagmanager.com hotjar.com *.hotjar.com typekit.net *.typekit.net youtube.com *.youtube.com vimeo.com *.vimeo.com sarasinstaging.wpengine.com *.sarasinstaging.wpengine.com sarasinandpartners.com *.sarasinandpartners.com
strict-transport-security: max-age=63072000; includeSubdomains;
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin