tipped.co.uk

.uk crawl

First seen 2026-04-15 · Last seen 2026-05-13 · ok HTTP/1.1 200 2391 ms crawled 2026-05-10

GB · 185.132.41.127 · AS8560 IONOS SE

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title: Businesses UK - Directory of UK Businesses
Description: Directory of Local Businesses
Language: en
Canonical: https://www.tipped.co.uk/

Technology

Server: Microsoft-IIS

Third-party hosts loaded (1)

fundingchoicesmessages.google.com×1

Registration

Registrar

Heart Internet Limited t/a Heart Internet

Created

2003-03-15

Expires

2028-03-15 665 days left

Updated

2026-03-05

Name servers

ns.heartinternet.uk.
ns2.heartinternet.uk.

DNS records live

NS

ns.heartinternet.uk
ns2.heartinternet.uk

MX

10 mx.zoho.com
20 mx2.zoho.com

TXT

google-site-verification=90ofRnHhIUPj81ZAFLXddfYOQMa1e85Y-kRY9gTPWts

Email authentication weak

SPF: v=spf1 include:zoho.com include:authsmtp.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Sectigo RSA Domain Validation Secure Server CA

from 2025-05-07 to 2026-06-08

Expires in 19 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.tipped.co.uk/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: upgrade-insecure-requests; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.adtrafficquality.google; connect-src 'self' https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://adservice.google.c