stephens-scown.co.uk
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Analytics
-
- Google Analytics
- Google Tag Manager
- Ads
-
- Google Ads
- Google Ads (DoubleClick)
- Fonts
-
- Google Fonts
Third-party hosts loaded (16)
- cdn.jsdelivr.net×5
- www.google.com×4
- cdn.yoshki.com×3
- fast.fonts.net×2
- fonts.googleapis.com×2
- fonts.gstatic.com×2
- googleads.g.doubleclick.net×2
- unpkg.com×2
- www.googletagmanager.com×2
- ajax.googleapis.com×1
- maps.googleapis.com×1
- moneypennychat.appspot.com×1
- storage.googleapis.com×1
- www.google-analytics.com×1
- www.googleadservices.com×1
- www.gstatic.com×1
Social
Contact
- Phone
Registration
- Registrar
- Tucows Inc t/a Tucows
- Created
- 1998-05-23
- Expires
- 2027-05-23 367 days left
- Updated
- 2026-04-24
- Name servers
-
- paloma.ns.cloudflare.com.
- vick.ns.cloudflare.com.
DNS records live
- NS
-
- paloma.ns.cloudflare.com
- vick.ns.cloudflare.com
- MX
-
- 10 eu-smtp-inbound-1.mimecast.com
- 10 eu-smtp-inbound-2.mimecast.com
- TXT
-
_rbztcoky68azt9agxgi2x9uprhbpqnr88gm2ug4v9febdip5q6gdpgarv8s5kkq39fbotnrv3rf0s9u512b
- Verified for
-
- Apple
- GlobalSign
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:_spf.createsend.com include:eu._netblocks.mimecast.com include:reader.egress.com include:spf.protection.outlook.com include:spf.uk.mtg.egress.com include:spf.uk.exclaimer.net -allstrict (-all) - DMARC
-
v=DMARC1; p=none; rua=mailto:3b4621c983a3121@rep.dmarcanalyzer.com; ruf=mailto:3b4621c983a3121@for.dmarcanalyzer.com; fo=1;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
E7
Expires in 63 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src * blob: data: 'self' 'unsafe-eval' 'unsafe-inline'; report-uri https://cspreporting.uk/csp/, script-src blob: 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' snap.licdn.com js.createsend1.com ajax.googleapis.com bat.bing.com *.cookiebot.com cc.cdn.civiccomputing.com cdn.jsdelivr.net cdn.mxpnl.com connect.facebook.net dev.visualwebsiteoptimizer.com *.doubleclick.net maps.googleapis.com moneypennychat.appspot.com script.hotjar.com static.hotjar.com storage.googleapis.com www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com www.gstatic.com unpkg.com www.youtube.com player.vimeo.com consentcdn.cookiebot.com googleads.g.doubleclick.net; report-uri https://cspreporting.uk/csp/, style-src 'report-sample' 'self' 'unsafe-inline' fast.fonts.net fonts.googleapis.com www.gstatic.com; report-uri https://cspreporting.uk/csp/, object-src 'self' *.flickr.com; report-uri https://cspreporting.uk/csp/, base-uri 'self'; report-uri https://cspreporting.- strict-transport-security
max-age=31536000
Links to (7)
- bcorp.com×2
- facebook.com×2
- infotex.uk×2
- instagram.com×2
- linkedin.com×2
- twitter.com×2
- youtube.com×2