vistrycareers.co.uk
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (3)
- cookie-cdn.cookiepro.com×3
- www.googletagmanager.com×3
- use.typekit.net×1
Social
Registration
- Registrar
- Tucows Inc t/a Tucows
- Created
- 2019-12-01
- Expires
- 2026-12-01 194 days left
- Updated
- 2025-11-30
- Name servers
-
- ns1.hover.com.
- ns2.hover.com.
DNS records live
- NS
-
- ns1.hover.com
- ns2.hover.com
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Amazon RSA 2048 M04
Expires in 76 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin, origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(), payment=()- x-content-type-options
nosniff- content-security-policy
base-uri 'none';default-src https://www.vistrycareers.co.uk fonts.gstatic.com;object-src 'none';font-src 'self' *.google.com *.gstatic.com *.typekit.net data:;form-action 'self';script-src https: 'strict-dynamic' 'nonce-1205c3ed8b' 'nonce-519ca7a75f' 'nonce-8005926990' 'nonce-52c8d4c7ce' 'nonce-167f2c26aa' 'nonce-2d6e8959e9' 'nonce-01415f5cb1' 'nonce-56e28e9024' 'nonce-1c5291d55b' 'nonce-91c41ba414' 'nonce-52c8d4c7ce' 'nonce-24dcedbe0f' 'nonce-ab717a8a80';style-src 'self' 'unsafe-inline' fonts.googleapis.com *.typekit.net;img-src 'self' data: https: *.fbcdn.net *.cdninstagram.com *.cookiepro.com *.w3.org *.googleapis.com *.gstatic.com *.googletagmanager.com;connect-src 'self' *.cookiepro.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.google.com;frame-src *.vimeo.com *.youtube.com;frame-ancestors 'self' *.icims.com;- strict-transport-security
max-age=15768000; includeSubDomains