selectaglaze.co.uk
HTML metadata
Technology
- Server
- Apache
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (2)
- fonts.googleapis.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- Selectaglaze LimitedAlban ParkHatfield RoadSt AlbansAL4 0JJ
DNS records live
- NS
-
- ns0.bt.net
- ns1.bt.net
- ns2.bt.net
- MX
-
- 0 selectaglaze-co-uk.mail.protection.outlook.com
- TXT
-
MS=0551A3174512336A3698527CB4F0F38280390BC55y/fk/yd/9MJ/kMrP3frL3C3fY8laBALqHMquhLDxb8=
- Verified for
-
- Apple
- GlobalSign
Email authentication weak
- SPF
-
v=spf1 include:spf.protection.outlook.com include:spf.UK.exclaimer.net ip4:194.74.54.100 -allstrict (-all) - DMARC
- not published
- DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCJq1U5Yitqf3a8pIOpb8cSFcnpZrf4CXFKJ7YreVstTLMM2xC7PAN6NO7+kG53MuHC6wNptlCdcA8jsPcYSS…
selectors probed - selector1:
Certificate (current)
E7
Expires in 60 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src ourworldindata.org *.twimg.com 'self' data: 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.youtube.com *.nationalbimlibrary.com *.googletagmanager.com *.google-analytics.com *.redsnapper.net *.formstack.com *.gstatic.com *.googleapis.com *.google.com *.leadforensics.com *.doubleclick.net *.tawk.to *.jsdelivr.net snap.licdn.com *.linkedin.com *.linkedin.oribi.io *.office365.com bookings.cloud.microsoft;- strict-transport-security
max-age=31536000; includeSubDomains
Links to (5)
- youtube.com×1
- x.com×1
- ribacpd.com×1
- linkedin.com×1
- instagram.com×1