sellingtravel.co.uk

HTML metadata

Technology

Server

nginx

CMS

WordPress

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (4)

• cdn.elementor.com×2
• www.googletagmanager.com×2
• fonts.googleapis.com×1
• fonts.gstatic.com×1

Social

• facebook
• instagram
• linkedin
• youtube

DNS records live

NS

• ns1122.ui-dns.biz
• ns1122.ui-dns.de

MX

• 10 mx01.hornetsecurity.com
• 20 mx02.hornetsecurity.com
• 30 mx03.hornetsecurity.com
• 40 mx04.hornetsecurity.com

Verified for

• Brevo
• Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:spf.hornetsecurity.com include:spf.sendinblue.com -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none; rua=mailto:dmarc@mailinblue.com!10m; ruf=mailto:dmarc@mailinblue.com!10m; rf=afrf; pct=100; ri=86400

policy: none (monitoring only) · sp=none

DKIM

• mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.sellingtravel.co.uk/

present

• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing Referrer Policy
• missing Permissions Policy

Links to (9)

• bahamasagents.com×1
• facebook.com×1
• instagram.com×1
• issuu.com×1
• linkedin.com×1
• niagaraparks.com×1
• sunexpress.com×1
• travelforeverybody.com×1
• youtube.com×1

Linked from (2)

• travelforeverybody.com×1
• thesonorainn.com×1