thebelfry.com
HTML metadata
Technology
- CDN
- Azure Front Door
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
- Social widgets
-
- Vimeo Embed
Third-party hosts loaded (3)
- use.typekit.net×2
- player.vimeo.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- Lichfield Road, B76 9PR, Wishaw, Sutton Coldfield, West Midlands, GB
Registration
- Registrar
- Tucows Domains Inc.
- Created
- 1998-07-10
- Expires
- 2026-07-09 51 days left
- Updated
- 2025-07-03
- Name servers
-
- ns0.atlasisp.net
- ns1.atlasisp.net
- ns2.atlasisp.net
DNS records live
- NS
-
- ns0.atlasisp.net
- ns1.atlasisp.net
- ns2.atlasisp.net
- MX
-
- 10 d230055.b.ess.uk.barracudanetworks.com
- 5 d230055.a.ess.uk.barracudanetworks.com
- TXT
-
Show 5 TXT records
intacct-esk=06828E2C55AB5AE7E0633806410A4E33apple-domain-verification=BN1jPDY06MSWaXR1MS=ms942499473p9mnt3veo0m1hg43iub0f4rq6dW+wKvS9XrlA666RzW+9FeQFZ8qHng8Rt6tOwZNsc75CWa4Zl5N7m7zEtYxtht8XHuUZNbVVreSi3Ov9oC6zLw==
Email authentication strong
- SPF
-
v=spf1 mx a include:spf.ess.uk.barracudanetworks.com include:spf.premiersoftware.co.uk include:amazonses.com include:spf.protection.outlook.com include:spf.resdiary.com include:_spf.intacct.com include:_spf.salesforce.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; fo=1; rua=mailto:f1a9a777c71a650@rep.dmarcanalyzer.com,mailto:rua+thebelfry.com@dmarc.barracudanetworks.com; ruf=mailto:f1a9a777c71a650@for.dmarcanalyzer.com,mailto:ruf+thebelfry.com@dmarc.barracudanetworks.compolicy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDe9F3YFgXb1JwtmblZvMFwYCfCCrTwIsn72pcTaOgsWNcn2OFmTB5iNds12nqNaqEbeHQ9uV/Qf12ENHEZQB… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDaDwAfA0aFWSW9WO6k7qQLw5RiBPE97ZFJQirrAFMB4NXdjYcgB++v6G5hAKnjln8oxmGKKCgvKEZ3AKnqe+… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNm18znLZFvKVC74ph5rTW1pc7m+bhL721bnFhfXIvZCSRHhEh3onW09jJuViHzuTsh/Hc5rNo6R6zBzyQ… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDURKHdCW7UGA0qi9JTcwtxA6o5xeDSsjhHBCO6zw11JipfelSkBh3veea9t1teFfZjroFgE43tmVjKRfWMmfi8WU…
selectors probed - selector1:
Certificate (current)
GeoTrust TLS RSA CA G1
Expires in 116 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP uses wildcard sources
- missing frame protection
Header values
- referrer-policy
strict-origin- permissions-policy
accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), battery=(self), camera=(self), clipboard-read=(self), clipboard-write=(self), conversion-measurement=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), focus-without-user-activation=(self), fullscreen=(self), gamepad=(self), geolocation=(self), gyroscope=(self), hid=(self), idle-detection=(self), interest-cohort=(self), keyboard-map=(self), magnetometer=(self), microphone=(self), midi=(self), navigation-override=(self), payment=(self), picture-in-picture=*, publickey-credentials-get=(self), screen-wake-lock=(self), serial=(self), speaker-selection=(self), sync-script=(self), sync-xhr=(self), trust-token-redemption=(self), usb=(self), vertical-scroll=*, web-share=(self), window-placement=(self), xr-spatial-tracking=(self),- x-content-type-options
nosniff- content-security-policy
connect-src 'self' ws: *.shiji.world *.abovecloud.io *.google.com *.googletagmanager.com tagmanager.google.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.marker.io *.amazonaws.com *.cookiebot.com www.youtube.com www.youtube-nocookie.com *.googlesyndication.com *.typekit.net *.matterport.com *.analytics.google.com *.g.doubleclick.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *- strict-transport-security
max-age=31536000; includeSubDomains