winchesterbid.co.uk

HTML metadata

Technology

Server

nginx

CMS

WordPress 7.0

PHP

8.4.21

jQuery

1.12.2 known XSS (<3.5)

Fonts

• Adobe Fonts
• Google Fonts

Third-party hosts loaded (6)

• pbs.twimg.com×5
• ajax.googleapis.com×2
• maxcdn.bootstrapcdn.com×2
• code.jquery.com×1
• fonts.googleapis.com×1
• use.typekit.net×1

Social

• facebook
• instagram
• linkedin
• twitter
• youtube

Contact

Phone

• 2026-05-05 18

DNS records live

NS

• ns1.livedns.co.uk
• ns2.livedns.co.uk
• ns3.livedns.co.uk

MX

• 0 winchesterbid-co-uk.mail.protection.outlook.com

Verified for

• Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://winchesterbid.co.uk/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (17)

• youtube.com×1
• winchestersparechange.uk×1
• winchesterfashionweek.co.uk×1
• winchesterbusinessawards.co.uk×1
• visitwinchester.co.uk×1
• twitter.com×1
• think-creative.co.uk×1
• placesupportpartnership.com×1
• placemanagement.org×1
• nbcc.police.uk×1
• linkedin.com×1
• instagram.com×1
• indiewinch.co.uk×1
• facebook.com×1
• carbonfootprint.com×1
• britishbids.info×1
• bestbarnone.com×1

Linked from (6)

• winchestertouristguides.com×1
• winchester-rotary.org×1
• winchestersparechange.uk×1
• indiewinch.co.uk×1
• winchesterfashionweek.co.uk×1
• donater.co.uk×1