thebellatcharlbury.com

HTML metadata

Title: The Bell at Charlbury
Description: A 17th Century pub in a picturesque Cotswold market town in the heart of the community
Language: en

Open Graph

title: The Bell at Charlbury
locale: en_GB
site name: The Bell at Charlbury
description: A 17th Century pub in a picturesque Cotswold market town in the heart of the community
updated time: 2026-03-25T11:35:41+00:00

Technology

CDN: Cloudflare
CMS: WordPress
jQuery: 3.6.0

Analytics

Google Tag Manager

Cookie consent

Termly

Third-party hosts loaded (4)

fd.cleantalk.org×2
app.termly.io×1
static.klaviyo.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Cloudflare, Inc.

Created

2022-11-29

Expires

2032-11-29 2384 days left

Updated

2022-11-29

Name servers

major.ns.cloudflare.com
venus.ns.cloudflare.com

DNS records live

NS

major.ns.cloudflare.com
venus.ns.cloudflare.com

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

knowbe4-site-verification=eeecccdc0bf3b2e1f5b717cbedcb3544
0ed1fe018a45e68ddd16574b34b7a6eecafe01ce4e

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:eu._netblocks.mimecast.com include:spf.ireshotels.com include:mail.zendesk.com include:spf.resdiary.com include:relay.mailchannels.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:a23gjmox@ag.eu.dmarcian.com; ruf=mailto:a23gjmox@fr.eu.dmarcian.com;

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNm18znLZFvKVC74ph5rTW1pc7m+bhL721bnFhfXIvZCSRHhEh3onW09jJuViHzuTsh/Hc5rNo6R6zBzyQ…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDURKHdCW7UGA0qi9JTcwtxA6o5xeDSsjhHBCO6zw11JipfelSkBh3veea9t1teFfZjroFgE43tmVjKRfWMmfi8WU…

selectors probed

Certificate (current)

E8

from 2026-04-28 to 2026-07-27

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.thebellatcharlbury.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline'; script-src 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' *.klaviyo.com; script-src-elem 'self' 'unsafe-inline' app.termly.io *.cleantalk.org r1.dotdigital-pages.com *.cloudflareinsights.com *.klaviyo.com *.doubleclick.net www.googletagmanager.com connect.facebook.net maps.googleapis.com; style-src 'self' data: 'unsafe-inline' *.klaviyo.com *.typekit.net fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' *.typekit.net *.googleapis.com *.klaviyo.com; img-src 'self' bookings.thewildrabbit.co.uk bookings.thebellatcharlbury.com bookings.thefoxatoddington.com data: www.daylesfordstays.com *.cleantalk.org www.facebook.com *.cdninstagram.com secure.gravatar.com *.google.co.uk *.google.com *.googletagmanager.com maps.gstatic.com *.googleapis.com *.w.org; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com use.typekit.net *.klaviyo.com js.stripe.com; connect-src 'self' app.termly.io *.cleantalk.org *.klaviyo.com *.doubleclick.net *.googlesynd
strict-transport-security: max-age=63072000; includeSubDomains; preload