ehattons.com

Live preview

This is a live, sandboxed embed of ehattons.com — not a copy. What it shows can change any time the site itself does.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

no-cache, no-store, max-age=0

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self' https://static.klaviyo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hattons.co.uk data: google.com cdn.jsdelivr.net polyfill.io seal.globalsign.com ssif1.globalsign.com www.googletagmanager.com az416426.vo.msecnd.net www.google-analytics.com *.datatables.net js.pusher.com *.cloudfront.net ajax.aspnetcdn.com tagmanager.google.com www.gstatic.com *.klaviyo.com *.facebook.net cdnjs.cloudflare.com *.postcodeanywhere.co.uk js.hs-scripts.com js.usemessages.com js.hs-analytics.net *.announcekit.app *.marketplan.io www.googlecommerce.com *.googleadservices.com *.googleapis.com *.bootstrapcdn.com www.google.com/_/scs/ *.google.com *.googlesyndication.com *.google.co.uk https://player.vimeo.com https://*.hotjar.com analytics.tiktok.com; style-src 'self' 'unsafe-inline' 'unsafe-hashes' *.hattons.co.uk cdn.jsdelivr.net *.cloudfront.net fonts.googleapis.com tagmanager.google.com directoryproductimages.blob.core.windows.net *.datatables.net *.postcodeanywhere.co.uk hattonsauctionworx.blob.core.windows.net static.klaviyo.com *.bootstrapcdn.com www.googletagmanager.com; img-src 'self' data: *.hattons.co.uk directoryproductimages.blob.core.windows.net cdn.shopify.com ssif1.globalsign.com seal.globalsign.com www.paypalobjects.com img.youtube.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.co.uk *.cloudfront.net bugherd-attachments.s3.amazonaws.com tagmanager.google.com hattonsmodelrailways.3cx.co.uk *.facebook.com *.klaviyo.com www.googletagmanager.com *.postcodeanywhere.co.uk *.datatables.net *.abmr.net *.hubspot.com *.googleusercontent.com secure.gravatar.com *.wp.com connect.facebook.net *.google-analytics.com *.analytics.google.com googleads.g.doubleclick.net *.analytics.google.com i.ytimg.com www.google.ie hattonsauctionworx.blob.core.windows.net blob: retail.googleapis.com *.googlesyndication.com railsofsheffield.com; font-src 'self' 'unsafe-inline' fonts.gstatic.com d17jp22xfcc13q.cloudfront.net fonts.googleapis.com *.cloudfront.net data: use.fontawesome.com *.bootstrapcdn.com static.klaviyo.com; media-src 'self' bugherd-attachments.s3.amazonaws.com directoryproductimages.blob.core.windows.net; connect-src 'self' dc.services.visualstudio.com polyfill.io www.google-analytics.com pro.ip-api.com fcm.googleapis.com connect.facebook.net *.facebook.com *.klaviyo.com *.globalsign.com hattonscoukapidev.azurewebsites.net auth.hattons.co.uk *.postcodeanywhere.co.uk *.hubspot.com stats.g.doubleclick.net analytics.google.com www.google.co.uk www.google.ie *.analytics.google.com *.google-analytics.com *.analytics.google.com www.google.com google.com *.googlesyndication.com ad.doubleclick.net www.googleadservices.com analytics.tiktok.com railsofsheffield.com rails-signalr.service.signalr.net wss://rails-signalr.service.signalr.net; frame-src 'self' 'unsafe-inline' www.youtube.com www.facebook.com *.google.com www.googletagmanager.com directoryproductimages.blob.core.windows.net https://player.vimeo.com *.googlesyndication.com googleads.g.doubleclick.net;

Strict-Transport-Security

max-age=2592000

X-Frame-Options

Not sent

X-Content-Type-Options

Not sent

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://ehattons.com/HTTP 301

   → http://www.hattons.co.uk/?utm_source=ehattons.com&utm_medium=redirect&utm_campaign=ehattonsredirect

2. 2.http://www.hattons.co.uk/?utm_source=ehattons.com&utm_medium=redirect&utm_campaign=ehattonsredirectHTTP 301

   → https://www.hattons.co.uk/?utm_source=ehattons.com&utm_medium=redirect&utm_campaign=ehattonsredirect

3. 3.https://www.hattons.co.uk/?utm_source=ehattons.com&utm_medium=redirect&utm_campaign=ehattonsredirectHTTP 200

Meta tags

Title

Model railways in OO Gauge, N Gauge & many more - Hattons

Description

Your Local Online Model Railway Store

Canonical

https://www.hattons.co.uk

Robots

Not set

Generator

Not set

Open Graph title

Not set

Open Graph description

Not set

Open Graph image

Not set

Open Graph type

Not set

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

21

Disallow rules (other agents)

2

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Google Tag Manageranalytics

  Found "googletagmanager.com/gtm.js" in the page's HTML

Related domains