theinjurylawyers.co.uk — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Personal Injury Compensation Claims - The Injury Lawyers
Description: We are THE Injury Lawyers! Specialists in personal injury claims and delivering the maximum compensation our clients deserve. We offer genuine No Win, No Fee representation. Speak to our claims team today on starting your claim for compensation.
Language: en
Canonical: https://www.theinjurylawyers.co.uk/

Technology

Server: https:
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (2)

cdn.yoshki.com×1
www.googletagmanager.com×1

Social

Contact

Email

info@theinjurylawyers.co.uk

Phone

08006347575

DNS records live

NS

ns.mainnameserver.com
ns2.mainnameserver.com

MX

10 mail.theinjurylawyers.co.uk

Email authentication strong

SPF

v=spf1 a mx a:mailforwards.extendcp.co.uk include:soverin.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=none; rf=afrf; pct=100; ri=86400

policy: reject (enforced) · sp=none

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iMeVFumcyFPu9d1YT7PvhjJRCwQPivSgP1xCx7fmX821UNVJAeRLBpSrSWp4GZ69wJ9p7oSiGw6ql…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-10-04 to 2026-10-06

Expires in 127 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.theinjurylawyers.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: sameorigin
permissions-policy: accelerometer=(self), attribution-reporting=*, autoplay=(self), bluetooth=(self), browsing-topics=*, camera=(self), compute-pressure=(self), cross-origin-isolated=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=(self), geolocation=(self), gyroscope=(self), hid=(self), identity-credentials-get=(self), idle-detection=(self), local-fonts=(self), magnetometer=(self), microphone=(self), midi=(self), otp-credentials=(self), payment=(self), picture-in-picture=*, publickey-credentials-create=(self), publickey-credentials-get=(self), screen-wake-lock=(self), serial=(self), storage-access=*, usb=(self), web-share=(self), window-management=(self), xr-spatial-tracking=(self)
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; connect-src 'self' www.googletagmanager.com www.google-analytics.com *.google-analytics.com; default-src 'self' jquery.com googletagmanager.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com; form-action 'self'; frame-src www.google.com https://cdn.yoshki.com/iframe/55845r.html; img-src 'self' data: www.googletagmanager.com www.google-analytics.com *.google-analytics.com www.theinjurylawyers.co.uk; object-src 'none'; script-src 'nonce-ODUwMWMxMjEyODE5YTkzMA==' *.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com cdn.jsdelivr.net; script-src-elem 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com *.google-analytics.com; style-src 'self' 'unsafe-inline' fonts.gstatic.com fonts.googleapis.com
strict-transport-security: max-age=31536000
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin

Links to (3)

Linked from (1)

whataboutclients.com×1