turtle-doves.co.uk
HTML metadata
Technology
- CDN
- Cloudflare
- Stack
- ASP.NET
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (9)
- cdn.jsdelivr.net×2
- services.postcodeanywhere.co.uk×2
- cdn.webselect.net×1
- gepi.global-e.com×1
- turtledoves-1.store-uk1.advancedcommerce.services×1
- use.typekit.net×1
- widget.trustpilot.com×1
- www.google.com×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- kai.ns.cloudflare.com
- sara.ns.cloudflare.com
- MX
-
- 0 turtledoves-co-uk01e.mail.protection.outlook.com
- Verified for
-
- Meta
- Microsoft 365
- Shopify
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com include:shops.shopify.com include:servers.mcsv.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:hello@turtle-doves.co.ukpolicy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz1G8piqSdukjQL5eJ2pY5iB9xW+nBlTlokWmk2ljiR5ZHsfO1HR7Q6Q3zyJYxvOO2EbccjcGhNMUE… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JpvTx0A2hCw60y/rnY/gZ+KIhT1gyqrHoJ366JpCqzVjuCG325nI9Mveuv7vGGoizPVzJGN4kqO5+ZOK7… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JaLJKFSQSN3xPcNlq74yXn9Ji6yTVQ3CmetEeLX4yXWlrDAe6ZAHQ2bFCaKrDPNLwFqyu77coDmzvMd0K…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 60 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; frame-ancestors *.turtle-doves.co.uk *.dotomi.com; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';- strict-transport-security
max-age=31536000