indexo.dev

tfglondon.com

.com crawl

First seen 2026-04-27 · Last seen 2026-05-17 · ok HTTP/1.1 200 1529 ms crawled 2026-05-04

US · 3.163.189.87 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
TFG London - fashion retail group including Hobbs, Phase Eight and Whistles designer brands
Description
TFG London, part of The Foschini Group, is a fashion retail group with brands like Hobbs, Phase Eight, Whistles, White Stuff, and Inside Story.
Language
en
Canonical
https://www.tfglondon.com/

Open Graph

url
https://www.tfglondon.com/
title
TFG London | The Foschini Group
locale
en_GB
site name
TFG London, part of The Foschini Group, is a fashion retail group with brands like Hobbs, Phase Eight, Whistles, White Stuff, and Inside Story.
description
TFG London, part of The Foschini Group, is a fashion retail group with brands like Hobbs, Phase Eight, Whistles, White Stuff, and Inside Story.

Technology

CDN
Amazon CloudFront
Server
AmazonS3
CMS
Gatsby
Analytics
  • Google Tag Manager

Third-party hosts loaded (4)

  • cdn.jsdelivr.net×2
  • www.googletagmanager.com×2
  • code.jquery.com×1
  • stackpath.bootstrapcdn.com×1

Registration

Registrar
Cloudflare, Inc.
Created
2017-03-10
Expires
2027-03-10 294 days left
Updated
2025-05-01
Name servers
  • anderson.ns.cloudflare.com
  • dolly.ns.cloudflare.com

DNS records live

NS
  • anderson.ns.cloudflare.com
  • dolly.ns.cloudflare.com
MX
  • 10 eu-smtp-inbound-1.mimecast.com
  • 20 eu-smtp-inbound-2.mimecast.com
TXT
Show 7 TXT records
  • MS=ms28299802
  • google-site-verification=154veXd4ZdJPqNFF0kmMddPD1qmqhhAEetweCaa5AoY
  • google-site-verification=gEJ4oak6oMJI-Vyk_R5sMSEGgUJOoSGxAtTCsTGcFvo
  • sophos-domain-verification=266fc06ecc3837fad2ba3969a161e022004d5a11
  • v=spf1 include:spf.mandrillapp.com include:eu._netblocks.mimecast.com ~all
  • 0ed1fe018afc283ee447fd4b6b80bf2b12dcb297e2
  • 6i7birnt1kpss4peqhs9hp79po

Certificate (current)

Amazon RSA 2048 M01
from 2025-09-21 to 2026-10-21
Expires in 154 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://tfglondon.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self "https://tfglondon.com"), microphone=()
x-content-type-options
nosniff
content-security-policy
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://code.jquery.com/jquery-3.7.1.slim.min.js https://cdn.equalweb.com/core/2.1.0/accessibility.js https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js https://code.jquery.com/jquery-3.4.1.slim.min.js https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.min.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com https://www.googletagmanager.com/gtm.js; style-src 'self' 'unsafe-inline'; img-src 'self' https://www.google-analytics.com; font-src 'self' data:; connect-src 'self' https://cdn.equalweb.com https://www.google-analytics.com; media-src 'self'; object-src 'none'; frame-src 'self'; worker-src 'none'; base-uri 'self'; manifest-src 'self'
strict-transport-security
max-age=31536000

Linked from (2)