scone-palace.co.uk
HTML metadata
Technology
- Server
- LiteSpeed
- Social widgets
-
- Vimeo Embed
Third-party hosts loaded (3)
- cdn.cookiehub.eu×1
- player.vimeo.com×1
- www.facebook.com×1
Social
Registration
- Registrar
- Ionos SE
- Created
- 1999-03-10
- Expires
- 2027-03-10 294 days left
- Updated
- 2025-03-09
- Name servers
-
- ns1085.ui-dns.biz.
- ns1085.ui-dns.com.
- ns1085.ui-dns.de.
- ns1085.ui-dns.org.
DNS records live
- NS
-
- ns1085.ui-dns.biz
- ns1085.ui-dns.com
- ns1085.ui-dns.de
- ns1085.ui-dns.org
- MX
-
- 10 mx1-eu.emailsecurity.app
- 20 mx2-eu.emailsecurity.app
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com include:shops.shopify.com include:spf.mandrillapp.com include:spf1.emailsecurity.app -allstrict (-all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDclM8KYaq4B5UeLQBkXJti3cRUTn/N0bITneDxPCR28VS2BhrX+b+/cLEB349YUrAAb1rv6nmR5fvLefuDue… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - selector2:
Certificate (current)
E7
Expires in 23 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.scone-palace.co.uk *.amazonaws.com *.cloudflareinsights.com *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com *.list-manage.com *.vimeocdn.com *.vimeo.com connect.facebook.net cdn.cookiehub.eu dash.cookiehub.com js.stripe.com; style-src 'self' 'unsafe-inline' www.scone-palace.co.uk *.googleapis.com *.googletagmanager.com *.gstatic.com *.mailchimp.com *.twimg.com *.twitter.com cdn.cookiehub.eu dash.cookiehub.com; img-src 'self' data: www.scone-palace.co.uk *.craft-cdn.com *.inspire.scot *.ytimg.com *.google.com *.google.co.uk *.google.co.in *.google.com.ph *.gstatic.com *.placeholder.com *.vimeocdn.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com; connect-src 'self' *.craftcms.com *.facebook.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.vimeo.com cdn.cookiehub.eu consent-eu.cookiehub.net dash.cookiehub.com; font-src 'self' data- strict-transport-security
max-age=31536000; includeSubDomains