Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 99.83.177.244 |
| Server Software | nginx |
| CDN | CDN (Miss from cloudfront) |
| Compression | gzip |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 99.83.177.244
Server Software nginx
CDN CDN (Miss from cloudfront)
Compression gzip
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://bmstores.co.uk:443 | 301 | HTTP/2 301 |
| 2 | https://www.bmstores.co.uk:443/ | 200 | HTTP/2 200 |
#1 URL https://bmstores.co.uk:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.bmstores.co.uk:443/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 22.8 ms |
| TCP Connect | 23.8 ms |
| TLS Handshake | 4.6 ms |
| Time To First Byte (TTFB) | 135.8 ms |
| Content Download | 88.2 ms |
| Total Response Time | 224 ms |
DNS Lookup 22.8 ms
TCP Connect 23.8 ms
TLS Handshake 4.6 ms
Time To First Byte (TTFB) 135.8 ms
Content Download 88.2 ms
Total Response Time 224 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000 |
| CSP | ✔ Configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | no-referrer-when-downgrade |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000
CSP ✔ Configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy no-referrer-when-downgrade
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | B&M | Discount Retail Store | Garden, Home, Toys & More |
| Meta Description | One of the UK |
| Canonical | https://www.bmstores.co.uk |
| Robots Meta | max-image-preview:large |
| Open Graph Title | B&M | Discount Retail Store | Garden, Home, Toys & More |
| Open Graph Description | One of the UK |
| Open Graph Image | https://www.bmstores.co.uk/wsimages/BM-logo-landscape.png |
Title B&M | Discount Retail Store | Garden, Home, Toys & More Meta Description One of the UK Canonical https://www.bmstores.co.uk Robots Meta max-image-preview:large Open Graph Title B&M | Discount Retail Store | Garden, Home, Toys & More Open Graph Description One of the UK Open Graph Image https://www.bmstores.co.uk/wsimages/BM-logo-landscape.png Detected Technologies
| Technology | Bootstrap jQuery Google Analytics Google Tag Manager Cloudflare Nginx |
Technology Bootstrap jQuery Google Analytics Google Tag Manager Cloudflare Nginx
HTTP Headers
| Content-type
| text/html;charset=UTF-8 |
| Date
| Thu, 20 Aug 2026 02:28:12 GMT |
| Content-encoding
| gzip |
| Server
| nginx |
| Set-cookie
| cftoken=0;Path=/;Expires=Fri, 18-Aug-2056 10:19:42 GMT;Secure;HttpOnly;SameSite=Lax |
| X-webapp-client-address
| 2a05:d012:9a4:d100:92dc:b0b7:5061:1914 |
| Cache-control
| s-maxage=21600 |
| Vary
| Accept-Encoding |
| X-cache
| Miss from cloudfront |
| Via
| 1.1 2240c1d1b110ac5a0d12735b2cf480d4.cloudfront.net (CloudFront) |
| X-amz-cf-pop
| CDG54-P1 |
| X-amz-cf-id
| QICteT-FkZyYh347-DhnEJr09o7L4uMMEJ3bd8s0TlIJLoCwI9AqQQ== |
| X-frame-options
| SAMEORIGIN |
| Referrer-policy
| no-referrer-when-downgrade |
| Content-security-policy
| default-src 'none'; connect-src 'self' *.bmstores.co.uk *.execute-api.eu-west-1.amazonaws.com *.algolia.net *.algolianet.com cookie-cdn.cookiepro.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.co.uk pagead2.googlesyndication.com *.hereapi.com js.api.here.com geolocation.onetrust.com *.zendesk.com *.zdassets.com *.zopim.com wss://*.zendesk.com wss://*.zopim.com wss://*.zdassets.com zendesk-eu.my.sentry.io o4507427284123728.ingest.de.sentry.io; font-src 'self' *.bmstores.co.uk; frame-src *.bmstores.co.uk www.cashforkidsgive.co.uk m.cmpgn.page bmstores.pgtb.me snapwidget.com player.vimeo.com td.doubleclick.net www.googletagmanager.com *.zdassets.com *.zendesk.com *.zopim.com challenges.cloudflare.com; img-src 'self' blob: data: *.bmstores.co.uk *.cloudinary.com *.vimeocdn.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.co.uk cookie-cdn.cookiepro.com tracking.audio.thisisdax.com *.zdassets.com *.zdusercontent.com v2assets.zopim.io *.hereapi.com js.api.here.com *.youtube.com *.gravatar.com *.zendesk.com; media-src 'self' *.zdassets.com; script-src 'self' 'unsafe-eval' 'sha256-UJNmDN8U2CKZmkoM+CjXZTRnIXuwsQdbZ7VwYaW1BNI=' 'sha256-rb8vCuKKQ4xtqFhlNr4xKuuRU63NG5DUa3kaYudOKEg=' 'sha256-FhYNA80YG7c+q0aIxrAvQ+0cZDrjbJH0VKR0rXOCtVg=' 'sha256-JLb5jDDFol7dn3QTZTfc6qc/laR3IAjSOpnYKK2eteY=' 'sha256-+Ue+EAIFjXjJ69/gb+hqDhSR63YV+VzjVIhlz9BMI0E=' 'sha256-WpOcz882DHP0AP8WhuUozL1V07jJvozOGdsrcC4Bg6s=' *.bmstores.co.uk d1m2uzvk8r2fcn.cloudfront.net cookie-cdn.cookiepro.com *.googletagmanager.com snapwidget.com *.zdassets.com *.zendesk.com *.zopim.com challenges.cloudflare.com; style-src 'self' 'unsafe-inline' *.bmstores.co.uk d1m2uzvk8r2fcn.cloudfront.net; worker-src 'self' blob:; |
| X-content-type-options
| nosniff |
| Strict-transport-security
| max-age=31536000 |
Meta Tags
| Description | One of the UK |
| Robots | max-image-preview:large |
| Fb:pages | 143733879038782 |
Content-type text/html;charset=UTF-8
Date Thu, 20 Aug 2026 02:28:12 GMT
Content-encoding gzip
Server nginx
Set-cookie cftoken=0;Path=/;Expires=Fri, 18-Aug-2056 10:19:42 GMT;Secure;HttpOnly;SameSite=Lax
X-webapp-client-address 2a05:d012:9a4:d100:92dc:b0b7:5061:1914
Cache-control s-maxage=21600
Vary Accept-Encoding
X-cache Miss from cloudfront
Via 1.1 2240c1d1b110ac5a0d12735b2cf480d4.cloudfront.net (CloudFront)
X-amz-cf-pop CDG54-P1
X-amz-cf-id QICteT-FkZyYh347-DhnEJr09o7L4uMMEJ3bd8s0TlIJLoCwI9AqQQ==
X-frame-options SAMEORIGIN
Referrer-policy no-referrer-when-downgrade
Content-security-policy default-src 'none'; connect-src 'self' *.bmstores.co.uk *.execute-api.eu-west-1.amazonaws.com *.algolia.net *.algolianet.com cookie-cdn.cookiepro.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.co.uk pagead2.googlesyndication.com *.hereapi.com js.api.here.com geolocation.onetrust.com *.zendesk.com *.zdassets.com *.zopim.com wss://*.zendesk.com wss://*.zopim.com wss://*.zdassets.com zendesk-eu.my.sentry.io o4507427284123728.ingest.de.sentry.io; font-src 'self' *.bmstores.co.uk; frame-src *.bmstores.co.uk www.cashforkidsgive.co.uk m.cmpgn.page bmstores.pgtb.me snapwidget.com player.vimeo.com td.doubleclick.net www.googletagmanager.com *.zdassets.com *.zendesk.com *.zopim.com challenges.cloudflare.com; img-src 'self' blob: data: *.bmstores.co.uk *.cloudinary.com *.vimeocdn.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.co.uk cookie-cdn.cookiepro.com tracking.audio.thisisdax.com *.zdassets.com *.zdusercontent.com v2assets.zopim.io *.hereapi.com js.api.here.com *.youtube.com *.gravatar.com *.zendesk.com; media-src 'self' *.zdassets.com; script-src 'self' 'unsafe-eval' 'sha256-UJNmDN8U2CKZmkoM+CjXZTRnIXuwsQdbZ7VwYaW1BNI=' 'sha256-rb8vCuKKQ4xtqFhlNr4xKuuRU63NG5DUa3kaYudOKEg=' 'sha256-FhYNA80YG7c+q0aIxrAvQ+0cZDrjbJH0VKR0rXOCtVg=' 'sha256-JLb5jDDFol7dn3QTZTfc6qc/laR3IAjSOpnYKK2eteY=' 'sha256-+Ue+EAIFjXjJ69/gb+hqDhSR63YV+VzjVIhlz9BMI0E=' 'sha256-WpOcz882DHP0AP8WhuUozL1V07jJvozOGdsrcC4Bg6s=' *.bmstores.co.uk d1m2uzvk8r2fcn.cloudfront.net cookie-cdn.cookiepro.com *.googletagmanager.com snapwidget.com *.zdassets.com *.zendesk.com *.zopim.com challenges.cloudflare.com; style-src 'self' 'unsafe-inline' *.bmstores.co.uk d1m2uzvk8r2fcn.cloudfront.net; worker-src 'self' blob:;
X-content-type-options nosniff
Strict-transport-security max-age=31536000
