swpropertyauctions.co.uk
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- cdn.eigpropertyauctions.co.uk×197
- www.googletagmanager.com×2
- api.trak.ee×1
- fonts.googleapis.com×1
Contact
- Phone
- Address
- SW Property Auctions4th floor,87-88 Bartholomew CloseLondon EC1A 7BL
DNS records live
- NS
-
- ns05.domaincontrol.com
- ns06.domaincontrol.com
- MX
-
- 0 sanderson.esvacloud.com
- Verified for
-
- Microsoft 365
Email authentication weak
- SPF
-
v=spf1 mx include:spf.protection.outlook.com include:spf.esvacloud.com allpermissive (+all) — anyone can send as this domain - DMARC
-
v=DMARC1; p=none; adkim=r; aspf=r; pct=100; rua=mailto:rua_ea9615a791682fbd@uk.report.letsdmarc.compolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 63 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.eigonlineauctions.com *.eigroup.co.uk *.googleapis.com translate.google.com translate.googleapis.com *.googletagmanager.com *.google-analytics.com stats.g.doubleclick.net js.monitor.azure.com js.stripe.com essen11123.pcapredict.com *.vimeo.com *.vimeocdn.com az416426.vo.msecnd.net use.fontawesome.com connect.facebook.net *.amazonaws.com *.posthog.com *.google.com *.gstatic.com services.postcodeanywhere.co.uk *.worldpay.com cdn.jsdelivr.net a.trak.ee googleads.g.doubleclick.net;object-src 'self';style-src 'self' 'unsafe-inline' fonts.googleapis.com *.vimeocdn.com *.googleapis.com *.eigonlineauctions.com *.eigpropertyauctions.co.uk services.postcodeanywhere.co.uk cdn.jsdelivr.net;img-src 'self' *.eigpropertyauctions.co.uk *.gstatic.com *.googleapis.com www.google.com translate.google.com *.googletagmanager.com *.google-analytics.com eigroup.blob.core.windows.net data: www.facebook.com stats.g.doubleclick.net google.co.u- strict-transport-security
max-age=63072000; includeSubDomains; preload
Links to (1)
- sw.co.uk×1
Linked from (1)
- sw.co.uk×1