flutter.com

HTML metadata

Title: Flutter Entertainment plc | Global Leader in Online Betting & Gaming
Description: Description Meet Flutter Entertainment plc – the company powering the world’s leading betting and gaming brands with innovation, scale and integrity.
Language: en-GB
Canonical: www.flutter.com/

Open Graph

url: https://www.flutter.com/home/
title: Flutter Entertainment plc | Global Leader in Online Betting & Gaming
description: Description Meet Flutter Entertainment plc – the company powering the world’s leading betting and gaming brands with innovation, scale and integrity.

Technology

CDN: Cloudflare
CMS: Nuxt

Social

Registration

Registrar

SafeNames Ltd.

Created

2002-03-26

Expires

2027-03-26 310 days left

Updated

2026-03-27

Name servers

rene.ns.cloudflare.com
susan.ns.cloudflare.com

DNS records live

NS

rene.ns.cloudflare.com
susan.ns.cloudflare.com

MX

10 de-smtp-inbound-1.mimecast.com
20 de-smtp-inbound-2.mimecast.com

TXT

Show 23 TXT records

onetrust-domain-verification=4f2126ab59734d45abdeb1f165dce996
QuoVadis=03a90749-9507-43a8-9c8c-11214041bf96
onetrust-domain-verification=c581a59842d746399db471507e116e61
identrust_validate=jjVuCTs4Vl0wdMjorJnlI1ALiUWialU9S97adIU622QO
dtm-domain-verification=6kA87eXWPYoSVyN_1-pH1x45DAyLUKLoSUJC80c7Sb0
ZOOM_verify_ZmkusZnpTd67Aji9e6BCtw
wiz-domain-verification=6eb938c6c4d3063ecc8f05a1a63720bce1b41cb563cf9a48a85329b445962ea3
google-gws-recovery-domain-verification=70712991
identrust_validate=c6Ctp+gs/g0/jzMRaRRWfInXOH2FBXDS2szGScr97pNw
adobe-idp-site-verification=9539128330b1183d9bcd3bca1600406d5150313cc7c17a77ce3bfdbc4defa9b7
apple-domain-verification=boORvgubH1F5Xfrc
atlassian-domain-verification=S5Em1DDVxzIRkGcYq0dd4e5yZ5K99D6Rb3B20jnojbDQejgeu5pwtJw7h9Uvmbmn
asv=0c09ba1658405acb2e4d4b4fa3bb21f6
identrust_validate=Z4n1jOEpCxaNVIJ2oHPZ238SpTV4XzShjJYyKo32Uq5p
jamf-site-verification=WeSmr3zFTbCKcQd-rXvk2A
identrust_validate=5px8YLHSvt+QT3K6h8Tdp3o23AUcbE51W3dgrGeb8C27
identrust_validate=f9K1A/GUgFLM/oKCHpeRp/dLNXoI7lbOdSRIQOWT7PFs
knowbe4-site-verification=fc0d9c56207452708a684d286c265da7
miro-verification=29074cf7f3cce39f2ac05823a2a472352c99af7d
google-site-verification=JCLhldqTyazLB54fyPCzwi_nRLHmKA3IjYWoDg3RF3Q
autodesk-domain-verification=sYki3MA1nIcfYbtMHFzf
google-site-verification=ZVjLCkld-aiN52HAQqhVXVytiUUhSPBvASUX6FHj3lE
onetrust-domain-verification=9d2714e92e2a4de8af6e4306bf18ac9e

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:de._netblocks.mimecast.com include:spf_c.oraclecloud.com ip4:185.20.95.20 ip4:217.112.150.38 ip4:54.76.240.229 ip4:54.195.28.80 ip4:52.213.120.101 ip4:99.81.23.194 ip4:99.80.114.2 -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:04702751b1b44018acddf400ca2597ad@dmarc-reports.cloudflare.net

policy: reject (enforced)

DKIM

selector1: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCLGKtvwPBaTnY5UO4vJFF3sllmbcPwJK6xFYLdXqtbuzIasnDOoN+YVBagdp+3oGZ2FE57QAPw3O6Z5mQWv89+taknN…

selectors probed

Certificate (current)

WE1

from 2026-05-09 to 2026-08-07

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://flutter.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: sameorigin
permissions-policy: geolocation=(self "https://ir.design-portfolio.co.uk" "https://flutter2024tf.q4web.com"), microphone=(), camera=(), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'self' *.connectidfeed.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://consent.cookiebot.com www.google-analytics.com *.websuccess-data.com *.monsido.com secure.insightful-cloud-7.com *.trackedlink.net snap.licdn.com sc.lfeeder.com consentcdn.cookiebot.com https://player.vimeo.com/api/player.js; style-src 'self' 'unsafe-inline' *.typekit.net; img-src 'self' data: 'self' www.gravatar.com https://imgsct.cookiebot.com https://www.googletagmanager.com px.ads.linkedin.com tr-rc.lfeeder.com tracking.monsido.com tr-rc.lfeeder.com; font-src 'self' *.typekit.net; form-action https://r1.ddlnk.net https://flutter.com; frame-src 'self' 'self' https://flutter2024tf.q4web.com https://www.youtube.com https://player.vimeo.com https://www.google.com https://consentcdn.cookiebot.com; connect-src 'self' *.vimeo.com https://flutter2024tf.q4web.com https://vimeo.co
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin