valsparpaint.co.uk
HTML metadata
Technology
- Server
- volt-adc
- jQuery
- 3.2.1 known XSS (<3.5)
- Cookie consent
-
- Cookiebot
Third-party hosts loaded (10)
- cdn.jsdelivr.net×2
- cloud.typography.com×2
- cdn-4.convertexperiments.com×1
- code.jquery.com×1
- consent.cookiebot.com×1
- www.facebook.com×1
- www.farbyvalspar.pl×1
- www.google.com×1
- www.peinturevalspar.fr×1
- www.valspar.com×1
Social
DNS records live
- NS
-
- ns1.f5clouddns.com
- ns2.f5clouddns.com
- MX
-
Show 6 MX records
- 10 emhost60.sherwin.com
- 10 emhost61.sherwin.com
- 10 emhost62.sherwin.com
- 10 emhost63.sherwin.com
- 10 emhost64.sherwin.com
- 20 emhost65.sherwin.com
- TXT
-
Show 4 TXT records
_brhriegln0q07byeim0l8o6ya3ei17p_sw408gf3tosyylx55huf6tej91ajqg3_nijs04wnj6el11s7qhrm36mshl7re15D6B94E9ECBC8A457C80B4CC223E19137BD047F698665D33F3A803769750FD6A9
- Verified for
-
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 mx ip4:148.141.0.0/16 include:spf.protection.outlook.com include:cust.wombatsecurity.com include:_spf.salesforce.com include:rp.oracleemaildelivery.com include:trustpilotservice.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=reject;rua=mailto:7qfjzpkl@ag.dmarcian.com;ruf=mailto:7qfjzpkl@fr.dmarcian.com;fo=1policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 246 days
HTTP security headers
- present
-
- strict-transport-security
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing Content Security Policy
- weak frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN, SAMEORIGIN- permissions-policy
accelerometer=(), camera=(), geolocation=('self'), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()- x-content-type-options
nosniff- strict-transport-security
max-age=31536000