Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 81.148.213.75 |
| Server Software | CloudFront |
| CDN | CDN (Miss from cloudfront) |
| Compression | gzip |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 81.148.213.75
Server Software CloudFront
CDN CDN (Miss from cloudfront)
Compression gzip
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://screwfix.com:443 | 301 | HTTP/1.0 301 Moved Permanently |
| 2 | https://www.screwfix.com/ | 200 | HTTP/2 200 |
#1 URL https://screwfix.com:443
HTTP Status Code 301
Status HTTP/1.0 301 Moved Permanently
#2 URL https://www.screwfix.com/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 30.5 ms |
| TCP Connect | 31.6 ms |
| TLS Handshake | 4.3 ms |
| Time To First Byte (TTFB) | 905.2 ms |
| Content Download | 14.4 ms |
| Total Response Time | 919.7 ms |
DNS Lookup 30.5 ms
TCP Connect 31.6 ms
TLS Handshake 4.3 ms
Time To First Byte (TTFB) 905.2 ms
Content Download 14.4 ms
Total Response Time 919.7 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=63072000; includeSubDomains; preload |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=63072000; includeSubDomains; preload
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Meta Description | Screwfix: Thousands of products at trade prices | FREE delivery available 7 days a week | FREE click & collect in as little as a minute | Hundreds of stores |
| Canonical | https://www.screwfix.com/ |
Meta Description Screwfix: Thousands of products at trade prices | FREE delivery available 7 days a week | FREE click & collect in as little as a minute | Hundreds of stores
Canonical https://www.screwfix.com/
Detected Technologies
| Technology | React Google Analytics Google Tag Manager Next.js |
Technology React Google Analytics Google Tag Manager Next.js
HTTP Headers
| Content-type
| text/html; charset=utf-8 |
| Server
| CloudFront |
| Date
| Mon, 24 Aug 2026 11:57:08 GMT |
| Cache-control
| private, no-cache, no-store, max-age=0, must-revalidate |
| Content-encoding
| gzip |
| Content-security-policy
| script-src 'self' *.adalyser.com *.ads-twitter.com *.awin1.com *.bazaarvoice.com *.bing.com *.contentsquare.com *.contentsquare.net *.doubleclick.net *.dwin1.com *.euro.confirmit.com *.facebook.com *.facebook.net *.fredhopperservices.com *.google-analytics.com *.google.co.uk *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.incontact.com *.incontact.eu *.nice-incontact.com *.niceincontact.com *.paypal.com *.paypalobjects.com *.screwfix.com *.screwfix.local *.tiqcdn.com *.trustarc.com *.truste.com *.twitter.com *.videoly.co *.videoly.net *.wistia.com *.wistia.net *.wufoo.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.zenaps.com analytics.tiktok.com bat.bing.com https://screwfix.bloomreach.io cdn.attraqt.io contentsquare.com s.pinimg.com screwfixmedia.co.uk sdk.woosmap.com *.tealiumiq.com youtube.com *.optimizely.com bugcrowd.com assets.bugcrowdusercontent.com wss://*.noibu.com https://*.noibu.com js.clrt.ai https://www.datadoghq-browser-agent.com tracking.audio.thisisdax.com www.redditstatic.com https://ads-api.reddit.com; frame-ancestors 'self' https://screwfix.bloomreach.io https://app.optimizely.com/ https://portal.tradecentric.com https://campaign.citrusad.com; object-src 'self' *.gstatic.com; worker-src blob: 'self'; report-uri https://csp-processor-internal-ffx-csp-prod.k8s.ap.digikfplc.com/csp; report-to csp-report-uri |
| Etag
| "10mvgwf8mbp4jx4" |
| Referrer-policy
| strict-origin-when-cross-origin |
| Report-to
| { "group": "csp-report-uri", "max_age": 10886400, "endpoints": [{ "url": "https://csp-processor-internal-ffx-csp-prod.k8s.ap.digikfplc.com/csp" }] } |
| Set-cookie
| cf_feature_flag_user_id=qZGQTSkcQLmLPTZzF2XZSc; Max-Age=2592000; Path=/; Secure |
| Strict-transport-security
| max-age=63072000; includeSubDomains; preload |
| Vary
| Origin |
| X-content-type-options
| nosniff |
| X-dns-prefetch-control
| on |
| X-cache
| Miss from cloudfront |
| Via
| 1.1 1b1da097534e2da1615c490616d76aa8.cloudfront.net (CloudFront) |
| X-amz-cf-pop
| CDG50-P5 |
| X-amz-cf-id
| b9pasfz1ybgvw5XoRpjv1d7-Uv6F3Lqi8P-iHdLBkXKZH9y2KNzU-g== |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Optimizely-edge | on |
| Format-detection | telephone=no |
| Description | Screwfix: Thousands of products at trade prices | FREE delivery available 7 days a week | FREE click & collect in as little as a minute | Hundreds of stores |
| Page-name | home |
Content-type text/html; charset=utf-8
Server CloudFront
Date Mon, 24 Aug 2026 11:57:08 GMT
Cache-control private, no-cache, no-store, max-age=0, must-revalidate
Content-encoding gzip
Content-security-policy script-src 'self' *.adalyser.com *.ads-twitter.com *.awin1.com *.bazaarvoice.com *.bing.com *.contentsquare.com *.contentsquare.net *.doubleclick.net *.dwin1.com *.euro.confirmit.com *.facebook.com *.facebook.net *.fredhopperservices.com *.google-analytics.com *.google.co.uk *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.incontact.com *.incontact.eu *.nice-incontact.com *.niceincontact.com *.paypal.com *.paypalobjects.com *.screwfix.com *.screwfix.local *.tiqcdn.com *.trustarc.com *.truste.com *.twitter.com *.videoly.co *.videoly.net *.wistia.com *.wistia.net *.wufoo.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.zenaps.com analytics.tiktok.com bat.bing.com https://screwfix.bloomreach.io cdn.attraqt.io contentsquare.com s.pinimg.com screwfixmedia.co.uk sdk.woosmap.com *.tealiumiq.com youtube.com *.optimizely.com bugcrowd.com assets.bugcrowdusercontent.com wss://*.noibu.com https://*.noibu.com js.clrt.ai https://www.datadoghq-browser-agent.com tracking.audio.thisisdax.com www.redditstatic.com https://ads-api.reddit.com; frame-ancestors 'self' https://screwfix.bloomreach.io https://app.optimizely.com/ https://portal.tradecentric.com https://campaign.citrusad.com; object-src 'self' *.gstatic.com; worker-src blob: 'self'; report-uri https://csp-processor-internal-ffx-csp-prod.k8s.ap.digikfplc.com/csp; report-to csp-report-uri
Etag "10mvgwf8mbp4jx4"
Referrer-policy strict-origin-when-cross-origin
Report-to { "group": "csp-report-uri", "max_age": 10886400, "endpoints": [{ "url": "https://csp-processor-internal-ffx-csp-prod.k8s.ap.digikfplc.com/csp" }] }
Set-cookie cf_feature_flag_user_id=qZGQTSkcQLmLPTZzF2XZSc; Max-Age=2592000; Path=/; Secure
Strict-transport-security max-age=63072000; includeSubDomains; preload
Vary Origin
X-content-type-options nosniff
X-dns-prefetch-control on
X-cache Miss from cloudfront
Via 1.1 1b1da097534e2da1615c490616d76aa8.cloudfront.net (CloudFront)
X-amz-cf-pop CDG50-P5
X-amz-cf-id b9pasfz1ybgvw5XoRpjv1d7-Uv6F3Lqi8P-iHdLBkXKZH9y2KNzU-g==
