halfords.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since halfords.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

max-age=0, no-cache, no-store

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self' p11.techlab-cdn.com;base-uri 'self';font-src 'self' https: data:;form-action *;frame-ancestors 'self' https://runtime.commercecloud.com *.mobify-storefront.com *.commercecloud.salesforce.com halfords.com halfords.ie *.halfords.com *.halfords.ie *.demandware.net *.medallia.eu *.digital-cloud.medallia.eu https://runtime-admin-staging.mobify-storefront.com https://runtime-admin-preview.mobify-storefront.com https://runtime-admin-soak.mobify-storefront.com https://runtime-admin-testing.mobify-storefront-staging.com;img-src 'self' *.commercecloud.salesforce.com i1.adis.ws cdn.media.amplience.net washford.a.bigcontent.io cdn.media.halfords.com cdn.media.halfords.ie www.halfords.com api.ecpplatform.com cdn.cookielaw.org *.adalyser.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.linkedin.com *.facebook.com *.quantserve.com *.affec.tv *.google.com *.google.pt *.google.co.uk *.teads.tv bat.bing.net *.adnxs.com *.adsrvr.org bat.bing.com maps.gstatic.com fonts.gstatic.com *.googleapis.com *.gstatic.com *.googleusercontent.com *.bloomreach.cloud https://tiles.woosmap.com https://a.tiles.woosmap.com https://b.tiles.woosmap.com *.googlesyndication.com www.google.ro www.googleadservices.com *.contentsquare.net *.contentsquare.com c.az.contentsquare.net l.contentsquare.net https://heapanalytics.com s.yimg.com sp.analytics.yahoo.com https://track.omguk.com track.omguk.com https://applepay.cdn-apple.com *.feefo.com *.brsrvr.com *.webtrends-optimize.com *.redditstatic.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.ist-track.com alb.reddit.com test.oppwa.com eu-prod.oppwa.com *.paypal.com *.paypalobjects.com https://youtube.com https://*.youtube.com https://youtube-nocookie.com https://*.youtube-nocookie.com https://*.ytimg.com data:;object-src 'none';script-src cdn.cookielaw.org js-agent.newrelic.com *.nr-data.net nonce *.webtrends-optimize.com *.webtrends-optimize.workers.dev *.googletagmanager.com *.google-analytics.com 'unsafe-inline' bat.bing.com *.licdn.com *.adalyser.com connect.facebook.net *.tiktok.com *.medallia.eu *.quantserve.com go.affec.tv *.adnxs.com *.doubleclick.net *.teads.tv www.ist-track.com 'self' 'unsafe-eval' rules.quantcount.com *.contentsquare.net *.contentsquare.com app.contentsquare.com t.contentsquare.net https://cdn.heapanalytics.com https://heapanalytics.com *.googleapis.com *.gstatic.com *.google.com *.ggpht.com *.googleusercontent.com https://sdk.woosmap.com blob: s.yimg.com https://track.omguk.com https://www.facebook.com test.oppwa.com eu-prod.oppwa.com *.force.com *.salesforce.com *.my.site.com *.halfords.com *.salesforceliveagent.com https://applepay.cdn-apple.com *.feefo.com cdn.brcdn.com cdns.brsrvr.com pidataplatformhalfords.azure-api.net c.az.contentsquare.net csp.withgoogle.com *.afterpay.com *.exponea.com *.redditstatic.com x.klarna.com x.klarnacdn.net js.klarna.com *.payassi.st *.payment-assist.co.uk *.paypal.com https://assets-nonprod.thg.dev https://assets.thg.dev *.digital-cloud.medallia.eu stapecdn.com *.stapecdn.com https://runtime.commercecloud.com https://runtime-admin-staging.mobify-storefront.com https://runtime-admin-preview.mobify-storefront.com https://runtime-admin-soak.mobify-storefront.com https://runtime-admin-testing.mobify-storefront-staging.com *.site.com p11.techlab-cdn.com;script-src-attr 'unsafe-inline' p11.techlab-cdn.com;style-src 'self' 'unsafe-inline' cdn.cookielaw.org cookie-cdn.cookiepro.com https://fonts.googleapis.com test.oppwa.com eu-prod.oppwa.com *.googleapis.com *.force.com *.salesforce.com *.my.site.com *.halfords.com *.salesforceliveagent.com https://applepay.cdn-apple.com *.feefo.com *.webtrends-optimize.com https://heapanalytics.com;upgrade-insecure-requests;media-src 'self' https://youtube.com https://*.youtube.com https://youtube-nocookie.com https://*.youtube-nocookie.com cdn.media.amplience.net washford.a.bigcontent.io cdn.media.halfords.com cdn.media.halfords.ie i1.adis.ws cdn.static.amplience.net cdn.c1.amplience.net;connect-src 'self' cdn.cookielaw.org halfords-privacy.my.onetrust.com bam.eu01.nr-data.net *.webtrends-optimize.com *.webtrends-optimize.workers.dev https://api.cquotient.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.analytics.google.com *.google-analytics.com/g/collect *.analytics.google.com/g/collect bat.bing.com bat.bing.net *.run.app *.google.com *.google.pt analytics.tiktok.com *.teads.tv *.googlesyndication.com pixel.quantcount.com px.ads.linkedin.com localhost:* *.googleapis.com *.gstatic.com https://api.woosmap.com *.dxpapi.com wto-halfords-productfeed.azurewebsites.net *.contentsquare.net *.contentsquare.com https://heapanalytics.com s.yimg.com https://api.edq.com https://track.omguk.com https://www.facebook.com https://pixel.quantserve.com pixel.quantserve.com google.com play.google.com *.force.com *.salesforce.com *.my.site.com *.halfords.com *.salesforceliveagent.com https://applepay.cdn-apple.com *.feefo.com pidataplatformhalfords.azure-api.net csp.withgoogle.com *.azurewebsites.net *.exponea.com *.klarna.com js.klarna.com *.klarnacdn.net x.klarnacdn.net js.playground.klarna.com eu.playground.klarnaevt.com *.payassi.st *.payment-assist.co.uk www.googleadservices.com alb.reddit.com pixel-config.reddit.com www.ist-track.com test.oppwa.com eu-prod.oppwa.com *.paypal.com https://api-nonprod.thg.dev https://api.thg.dev https://assets-nonprod.thg.dev https://assets.thg.dev *.medallia.eu *.digital-cloud.medallia.eu stapecdn.com *.stapecdn.com https://runtime.commercecloud.com https://runtime-admin-staging.mobify-storefront.com https://runtime-admin-preview.mobify-storefront.com https://runtime-admin-soak.mobify-storefront.com https://runtime-admin-testing.mobify-storefront-staging.com *.salesforce-scrt.com p11.techlab-cdn.com;frame-src * *.site.com;child-src blob: 'self' https://youtube.com https://*.youtube.com https://youtube-nocookie.com https://*.youtube-nocookie.com;worker-src https://test.oppwa.com https://eu-prod.oppwa.com 'self' blob:

Strict-Transport-Security

max-age=15768000

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

no-referrer

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://halfords.com/HTTP 301

   → https://halfords.com/

2. 2.https://halfords.com/HTTP 301

   → https://www.halfords.com/

3. 3.https://www.halfords.com/HTTP 200

Meta tags

Title

Halfords - Inspiring a Lifetime of Motoring and Cycling

Description

We are the UK's leading provider of cycling, motoring services, vehicle servicing and repairs. Visit in-store, at our autocentres or shop online.

Canonical

https://www.halfords.com/

Robots

index, follow

Generator

Not set

Open Graph title

Halfords UK

Open Graph description

Visit Halfords for Bikes, Sat Nav & Audio, Motoring & Car Maintenance, Touring & Camping Equipment, and lots more.

Open Graph image

Not set

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Halfords UK

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

25

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Google Tag Manageranalytics

  Found "googletagmanager.com/gtm.js" in the page's HTML

Related domains