wastetyre.co.uk

HTML metadata

Technology

Server

nginx

CMS

WordPress 7.0

jQuery

3.7.1

Stack

PHP

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (3)

• fonts.googleapis.com×1
• gmpg.org×1
• www.googletagmanager.com×1

DNS records live

NS

• dnseuw.imagehosting.co.uk
• dnssco.imagehosting.co.uk
• dnsuks.im463.net
• dnsuse.im463.net

MX

• 10 d237033.a.ess.uk.barracudanetworks.com
• 20 d237033.b.ess.uk.barracudanetworks.com

TXT

• ppe-36851a4bb954aac8a3fe88777a577eba3f23a258 3600
• have-i-been-pwned-verification=dweb_6qr4mir44fazkq9muv71r17r
• ppe-3ab411a7b0ce3025cbc42467e3f925a50a9d6d87

Verified for

• Brevo
• Google
• Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf1.etelimited.co.uk -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; rua=mailto:0b8e18c3d598867@rep.dmarcanalyzer.com; ruf=mailto:0b8e18c3d598867@for.dmarcanalyzer.com; pct=100; adkim=s; aspf=s; fo=1;

policy: reject (enforced) · sp=reject

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuL3WFoa6CW+Z+VaJ7Q/aAI+H3a8uALue8z40cEe0Np3NAYRdTDjvVwtUEJc3XmSICxbXUkG5gVyIi…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.wastetyre.co.uk/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (7)

• tyresafe.org×1
• tyrerecovery.org.uk×1
• rrsuk.org×1
• ntda.co.uk×1
• kriesi.at×1
• environment-agency.gov.uk×1
• credenvproducts.co.uk×1

Linked from (1)

• murfittsindustries.com×1