wembleystadium.com

HTML metadata

Title: Home | Wembley Stadium
Description: For all the best sporting events and priority access to entertainment, hospitality membership by Experiences by Wembley Stadium offers a wide range of VIP options.
Language: en
Canonical: https://www.wembleystadium.com

Open Graph

url: http://www.wembleystadium.com/
title: Wembley Stadium
site name: www.wembleystadium.com
description: Inspiring memories

Technology

CDN: Azure Front Door

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (3)

cdn-ukwest.onetrust.com×1
s7.addthis.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Register SPA

Created

2001-07-27

Expires

2026-07-27 68 days left

Updated

2025-06-03

Name servers

ns1-36.azure-dns.com
ns2-36.azure-dns.net
ns3-36.azure-dns.org
ns4-36.azure-dns.info

DNS records live

NS

ns1-36.azure-dns.com
ns2-36.azure-dns.net
ns3-36.azure-dns.org
ns4-36.azure-dns.info

MX

5 mxb-0086ee01.gslb.pphosted.com
7 mxa-0086ee01.gslb.pphosted.com

TXT

Show 12 TXT records

u08c53pgdukh21lgaastmmmkj8
mhccg0a9abk6v2u8jfdb4gv874
google-site-verification=FzRY20OwX_Co0jgN1J_1lG0BR_1nbvdeEC7mJ-hNJs8
pscqfr2atc8jgv6go18m82qkra
amazonses:vxs8OS6KOwmiAsLgYkRmPv95n9wcuGJVyhdTStSxqLY=
lt1i3kpofovs9fdu9thktsfjdk
QuoVadis=2ab38c3d-7bc8-4110-b742-49e01950103c
knowbe4-site-verification=d90b3c1df8887ea1669fca54d98eed82
EDE7B5E0-1D1B-4B18-9A7F-B59E0E3C2B3E.220618
mbE3uQsy9dx45+yEeyzKrg6hCYvivlTO3SyRbFvKxAuIay4Hxc8E+q6oF8Vjhqa0t2RK9Cwh5PgEzAKH+87X5w==
MS=ms71007676
F6FBE420-141D-4BAE-A56D-7FA3EACB2E82

Email authentication strong

SPF

v=spf1 ip4:194.0.214.68 ip4:81.144.133.100 ip4:94.236.83.186 ip4:81.191.32.83 ip4:195.182.62.9 ip4:35.176.188.213 include:spf-0086ee01.pphosted.com include:spf-0086ee02.pphosted.com include:_spf.google.com include:spf.protection.outlook.com include:emaileuc.freshservice.com include:mail.zendesk.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine;fo=1;ruf=mailto:dmarc_reporting@thefa.com; rua=mailto:dmarc_reporting@thefa.com;pct=100

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TerY03ZL+QdRHQ7G505QAijA8eQs5g/I0y9M4viMQ+y9vimbKijFS9r+Hqxn+Qi9gfM5jgzeu7bHz…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IIOjR6KoYpQjndvhslYRGrNh4h+DbeK/Uy/vlftbieLf2qg4HSBiWtgZ9xvGk7pBTE+Ni0WIzYIp/9+pm…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIQ7lDMpyLFJLvcKBfJvu3FqFw1hAUAbA5X4QTVRRT8B7Xk+C5smqDXPLFUKUa/ra4J5mtImA0rQrUBNDF58Xi5t…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-09 to 2026-08-10

Expires in 82 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://wembleystadium.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin-when-crossorigin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://hcsseventns2.servicebus.windows.net https://analytics.google.com https://hcppsseventns2.servicebus.windows.net https://*.sitecorecloud.io/ https://*.cloudfront.net/ https://*.hotjar.io/ https://*.hotjar.com/ wss://ws.hotjar.com/ https://*.3ddigitalvenue.com/ https://thefa.jotform.com/ https://*.ecal.com/ https://cdn.livechatinc.com/tracking.js https://*.livechatinc.com/ https://*.livechat-files.com/ https://*.livechat-static.com/ https://region1.analytics.google.com/ https://player.vimeo.com/ https://tagmanager.google.com/ https://forms-eu1.hscollectedforms.net/collected-forms/v1/config/json https://js-eu1.hs-banner.com/v2/26048079/banner.js https://js-eu1.usemessages.com/conversations-embed.js https://*.lfeeder.com https://*.clarity.ms/ https://ldynamicspublicapi.leadforensics.com https://webeo-web-content.s3-eu-west-1.amazonaws.com/ https://cdn.jsdelivr.net https://js-eu1.hs-analytics.net/ https://*.hubspot.com/ https:/
strict-transport-security: max-age=31536000; includeSubDomains