watchfinder.co.uk

HTML metadata

Title

Watchfinder & Co. - The Pre-Owned Watch Specialist

Description

Visit Watchfinder to buy and sell luxury watches. Browse pre-owned watches from Rolex, Omega, Breitling, TAG Heuer, Cartier and more, all available now.

Language

en-GB

Canonical

https://www.watchfinder.co.uk/

Translations

de-at
de-de
en-ae
en-au
en-bg
en-ch
en-cy
en-cz
en-dk
en-ee
en-es
en-fi
en-gb
en-gr
en-hk
en-hr
en-hu
en-ie
en-is
en-lt
en-lv
en-mt
en-nl
en-no
en-nz
en-pl
en-pt
en-ro
en-se
en-si
en-sk
en-us
fr-be
fr-fr
fr-lu
it-it

Technology

Analytics

Google Analytics
Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (30)

fonts.googleapis.com×2
cdn.jsdelivr.net×1
cdn.ometria.com×1
fonts.gstatic.com×1
widget.trustpilot.com×1
www.google-analytics.com×1
www.googletagmanager.com×1
www.watchfinder.ae×1
www.watchfinder.at×1
www.watchfinder.au×1
www.watchfinder.be×1
www.watchfinder.bg×1
www.watchfinder.ch×1
www.watchfinder.com×1
www.watchfinder.com.de×1
www.watchfinder.cy×1
www.watchfinder.cz×1
www.watchfinder.dk×1
www.watchfinder.ee×1
www.watchfinder.es×1
www.watchfinder.fi×1
www.watchfinder.fr×1
www.watchfinder.gr×1
www.watchfinder.hk×1
www.watchfinder.hr×1
www.watchfinder.hu×1
www.watchfinder.ie×1
www.watchfinder.is×1
www.watchfinder.it×1
www.watchfinder.lt×1

Social

Contact

Phone

+44 1622621392

Registration

Registrar

Nom-IQ Limited t/a Com Laude

Created

2000-02-02

Expires

2027-02-02 258 days left

Updated

2026-01-28

Name servers

ns-1477.awsdns-56.org.
ns-1785.awsdns-31.co.uk.
ns-57.awsdns-07.com.
ns-802.awsdns-36.net.

DNS records live

NS

ns-1477.awsdns-56.org
ns-1785.awsdns-31.co.uk
ns-57.awsdns-07.com
ns-802.awsdns-36.net

MX

10 mxa-00657601.gslb.pphosted.com
10 mxb-00657601.gslb.pphosted.com

TXT

Show 8 TXT records

canva-site-verification=U8IghDMhXYtl2QYs6IaCWQ
docusign=1a0b3dc5-ea24-4a8b-aaa6-eb7321881a17
docusign=440325d5-3547-42dc-91ab-f8a8af6af53d
facebook-domain-verification=jleoebnbhavn78u8k3humuqtutlpbs
google-gws-recovery-domain-verification=51626886
google-site-verification=B5wlo69R4FNPUxb6N5W-wIlVwecGvEqGMno6HHV6fSg
mk-org-sso-7b6e0b82-0d19-4261-b709-306f7aa90928
CisionOne SAML=b8bdeb6d590d85a7ee4651ddfa7e987b25b21094c7ec995eaeaa0fded823a61c

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:trustpilotservice.com include:mail.zendesk.com include:spf-00657601.pphosted.com include:zohomail360.com include:spf.mirakl.net include:em3814.watchfinder.co.uk ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCaMg/kBHHyZvftDsaku6nurkgVhQCWfkAhk/Bwouqc7HKde5X5LE7/DTP6H5g9z9+0GxVFbNoEB96jAZeWD8…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-03-26 to 2026-10-10

Expires in 143 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.watchfinder.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: autoplay=(self "https://www.youtube.com"), fullscreen=(self "https://www.youtube.com"), geolocation=(self "https://maps.googleapis.com"), payment=(self "https://pay.realexpayments.com" "https://google.com" "https://pay.google.com")
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; frame-ancestors 'none'; object-src 'none'; worker-src 'self' blob:; child-src blob:; script-src 'self' 'strict-dynamic' 'unsafe-inline' https: 'nonce-k6V1/RjlyzSgjXqJ9ExYKGkWbvSiHyCD1NiV+WkvTjw='; img-src 'self' data: blob: *.watchfinder.co.uk *.googletagmanager.com *.ometria.com *.contentsquare.net *.ytimg.com *.adyen.com *.google.com *.gstatic.com *.postcodeanywhere.co.uk *.tvsquared.com *.doubleclick.net *.bidswitch.net *.adnxs.com *.media.net *.rubiconproject.com *.smartadserver.com *.taboola.com *.teads.tv *.3lift.com *.yahoo.net *.adform.net *.omnitagjs.com *.casalemedia.com *.criteo.com id5-sync.com *.360yield.com *.ivitrack.com *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.sharethrough.com *.tremorhub.com *.yieldlab.net *.yieldmo.com *.emxdgt.com *.demdex.net *.krxd.net *.dmxleo.com *.youtube.com *.facebook.com *.stackadapt.com *.adalyser.com *.google.co.uk *.facebook.net *.1rx.io *.bing.net *.bing.com; connect-src https:; frame-src *.youtub
strict-transport-security: max-age=31536000

Links to (5)

Linked from (1)

davecartledge.com×2