uxbridgecollege.ac.uk
HTML metadata
Technology
- CMS
- Joomla
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- kit.fontawesome.com×1
- www.googletagmanager.com×1
- www.recaptcha.net×1
Social
Contact
DNS records live
- NS
-
- ns10.ja.net
- ns11.ja.net
- ns12.ja.net
- MX
-
- 5 uxbridgecollege-ac-uk.mail.protection.outlook.com
- TXT
-
MS=500EF495FE03685BDDD167947F3ADB05AA534E56oF2EplSZJtyYSwY6XXsVMwiLxS7zJ9lDaHok5QHNoZTxoShw3nwOiBKgtrBcIR70NJmoNbGMf7U6vMjpMhzKSw==
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 mx ip4:45.131.139.154 ip4:185.194.168.25 ip4:212.219.243.146 include:spf.protection.outlook.com include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc-rua@dmarc.service.gov.ukpolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 45 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- cross-origin-opener-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src https://connect.facebook.net https://*.recaptcha.net https://rutc-info.co.uk https://region1.google-analytics.com https://analytics-ipv6.tiktokw.us https://*.career-pathways.co.uk https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://*.clarity.ms https://*.gstatic.com https://*.tiktok.com https://*.fontawesome.com https://*.google.com/ https://*.youtube.com https://*.googletagmanager.com 'unsafe-inline' 'unsafe-eval' 'self'; frame-ancestors 'self'; font-src https: data: 'self'; img-src https: data: 'self';- strict-transport-security
max-age=31536000- cross-origin-opener-policy
same-origin