shepherdsfriendly.co.uk

HTML metadata

Title: Shepherds Friendly | ISAs, Investments & Insurance
Description: Shepherds Friendly is a mutual society that offers simple savings solutions like ISAs, Over 50s Life Insurance, and Income Protection.
Language: en-GB
Canonical: https://www.shepherdsfriendly.co.uk/

Open Graph

url: https://www.shepherdsfriendly.co.uk/
title: Shepherds Friendly | ISAs, Investments & Insurance
locale: en_GB
site name: Shepherds Friendly
description: Shepherds Friendly is a mutual society that offers simple savings solutions like ISAs, Over 50s Life Insurance, and Income Protection.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Cloudflare Insights

Third-party hosts loaded (5)

ajax.googleapis.com×2
dev.visualwebsiteoptimizer.com×1
static.cloudflareinsights.com×1
www.google.co.uk×1
www.google.com×1

Social

Contact

Email

Phone

0800526249

DNS records live

NS

earl.ns.cloudflare.com
pam.ns.cloudflare.com

MX

10 eu-smtp-inbound-1.mimecast.com
20 eu-smtp-inbound-2.mimecast.com

TXT

Show 7 TXT records

fjvtb8qhmr5yxty3hbyjdsr0jvw8grvg
k6rvq1c8mc8h8qi2vii1tkutmi
ragcla03a6pfb9iq8rbkdtc50q
7jq1al5q1pkopqubjcrtb1r3jo
apple-domain-verification=DFnjBF4RLxb1aCTV
asv=ff4e1e952cfba56984a5d4b6ab253cb3
atlassian-domain-verification=d/CKWxH7GoPdMNaAvsxXnpuEztpMvMu2GPcze4S651yQHv7Ia1bT9XnoWDO61FZF

Email authentication partial

SPF

v=spf1 include:eu._netblocks.mimecast.com include:spf.protection.outlook.com include:_spf.salesforce.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:b92e13e6c75547feab0126ff1beb3791@dmarc-reports.cloudflare.net

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3EDwnNnlmqu7BapGiC4N8at+fhSn/TdWXroR/W+dHDQJ/yo8lLMX6WnedaDaaBodaqFl4rVIxDGIgLQYUIN…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstC0AN0bR91YwPWKuzcIL62uaiIGXiCpTGOq7+E9pciZbh7I7ZyuF5QgBmn0HdFb0frXUlmEf5kt1epcjS…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDO7gNrfHZlMrtM8A9zVbi8kFDCkRl2lxbdgB3FcIZb3KANxrl35Wr4ilGiN/nMsBGyMS4wAbxe2ndASOfBHaTr3i…

selectors probed

Certificate (current)

WE1

from 2026-05-11 to 2026-08-09

Expires in 81 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.shepherdsfriendly.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://www.shepherdsfriendly.co.uk; base-uri 'self' https://www.shepherdsfriendly.co.uk; connect-src 'self' *.google.com www.google-analytics.com www.googletagmanager.com https://*.cookieyes.com https://*.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://*.shepherdsfriendly.co.uk https://api-b.shepherdsfriendly.co.uk https://api.addressy.com https://api.reviews.co.uk https://api.reviews.io https://api.shepherdsfriendly.co.uk https://assets1.lottiefiles.com https://assets10.lottiefiles.com https://assets5.lottiefiles.com https://assets6.lottiefiles.com https://bat.bing.com https://capig.stape.cc https://cdn-cookieyes.com https://cdn.ravenjs.com https://cognito-identity.eu-west-1.amazonaws.com https://firehose.eu-west-1.amazonaws.com https://log.cookieyes.com/ https://pagead2.googlesyndication.com https://pixel-config.reddit.com https://region1.google-analytics.com https://shepherdsfriendly.blob.core.windows.net https://shepherdsfriendly.involve.m
strict-transport-security: max-age=31536000; includeSubDomains; preload

Links to (8)

Linked from (1)

financialmutuals.org×1