southernukulelestore.co.uk
HTML metadata
Technology
- Server
- Apache
- CMS
- Gatsby
- PHP
- 8.2.11 security-only
- Stack
- PHP
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (5)
- cdnjs.cloudflare.com×1
- fonts.googleapis.com×1
- widget.trustpilot.com×1
- www.googletagmanager.com×1
- www.youtube.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns19.domaincontrol.com
- ns20.domaincontrol.com
- MX
-
- 0 southernukulelestore-co-uk.mail.protection.outlook.com
- TXT
-
p0p46lc34xh4q98hs9h1ydhy5zsmjn0rNETORGFT11516249.onmicrosoft.com
Email authentication weak
- SPF
-
v=spf1 include:secureserver.net -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
GeoTrust TLS RSA CA G1
Expires in 210 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self' *.google.com *.google.co.uk; block-all-mixed-content; default-src 'self' *.justapplications.co.uk *.southernukulelestore.co.uk; child-src 'self'; connect-src 'self' *.ampproject.org *.algolianet.com *.algolia.net *.google-analytics.com *.yoast.com *.doubleclick.net *.google.com https://connect.facebook.net *.facebook.com *.braintree-api.com *.braintreegateway.com *.paypal.com *.bitbucket.org *.adroll.com *.consensu.org ; script-src 'unsafe-eval' 'unsafe-inline' 'self' *.stripe.com https://chimpstatic.com/ *.sagepay.com *.trustpilot.com *.algolianet.com *.algolia.net *.kaspersky-labs.com *.cookiebot.com *.ampproject.org *.wp.com *.googletagmanager.com *.smartlook.com *.facebook.com *.consensu.org *.adroll.com *.braintreegateway.com *.gstatic.com *.google.com *.paypal.com *.adobedtm.com *.trustpilot.com *.paypalobjects.com *.google-analytics.com *.widgets.magentocommerce.com *.vimeocdn.com *.ytimg.com *.nextroll.com *.googleadservices.com *.cloudfront.net *.youtube- strict-transport-security
max-age=31536000; includeSubdomains; preload