tombolaarcade.co.uk

HTML metadata

Title: Play Online Slots & Casino Games | Arcade Games Online | tombola arcade
Description: Arcade games you won’t find anywhere else. Built in-house, our games are made to be quick, clever and genuinely good craic. Whether you’re a seasoned Spin Master or just popping in for a quick game, you’re right at home. Become a Spin Master and join the community. Ready to let fun take over?
Language: en
Canonical: https://www.tombolaarcade.co.uk/

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights
Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (8)

fonts.googleapis.com×2
static.cloudflareinsights.com×2
cdn-ukwest.onetrust.com×1
cdn.optimizely.com×1
fonts.gstatic.com×1
uk-aws-cloud-resources-2.tombola.com×1
widget.trustpilot.com×1
www.googletagmanager.com×1

Social

Contact

Phone

08004643411

Registration

Registrar

Domain Directors Pty Ltd t/a Instra Corporation

Created

2009-02-16

Expires

2027-02-16 271 days left

Updated

2026-01-31

Name servers

andy.ns.cloudflare.com.
jean.ns.cloudflare.com.

DNS records live

NS

andy.ns.cloudflare.com
jean.ns.cloudflare.com

TXT

Show 8 TXT records

trustpilot-one-time-verification-id=91baa7f4-58b9-43a6-9695-a45712e672dc
uq9o4la21bc7ntibpqks2i30
v2tj2q4k95w7dwl46ztpmngh2t58kzt9
2tt6pu6n0r8pmjkgnf8edh5l35
7k1z11dxcqqh60mzywgtn9bfq67ct5k0
bsdv58op4kt7a4n2h55pnfff69
g6dj01qh9wzn2d7gg6sqgrdqr47782lk
nsq3lq3vtby1j3w6gsnv498gcdg2d05t

Verified for

Google
Meta

Email authentication no MX

SPF: not published
DMARC: v=DMARC1; p=none; sp=none; rua=mailto:darren.lawson@tombola.com; ruf=mailto:darren.lawson@tombola.com; rf=afrf; pct=100; ri=86400
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-03-24 to 2026-06-23

Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.tombolaarcade.co.uk/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' *.tombola.co.uk *.tombola.com *.tombolaarcade.co.uk https://app.optimizely.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: report-to csp-endpoint; report-uri https://tombola.report-uri.com/r/t/csp/reportOnly; script-src-elem 'self' 'unsafe-inline' 'report-sample' https://*.tombola.com https://*.tombola.co.uk https://cdn-ukwest.onetrust.com https://cdn.optimizely.com https://app.optimizely.com https://www.googletagmanager.com https://www.google-analytics.com https://flex.cybersource.com/cybersource/assets/microform/0.11/flex-microform.min.js https://ad.doubleclick.net https://applepay.cdn-apple.com https://bam.nr-data.net https://js-agent.newrelic.com https://static.cloudflareinsights.com https://ajax.cloudflare.com/cdn-cgi/scripts/ https://secure.adnxs.com https://bat.bing.com https://www.clarity.ms https://cdn.taboola.com https://trc.taboola.com https://connect.facebook.net https://sc-static.net https://cdn.quantummetric.com/qscripts/quantum-tombola.js https://unpkg.com https://assets.comcarde.com https://*.tombolaarcade.co.uk;