indexo.dev

acpgbi.org.uk

.uk crawl

First seen 2026-05-09 · Last seen 2026-05-15 · ok HTTP/1.1 200 3220 ms crawled 2026-05-15

GB · 51.132.26.111 · AS8075 Microsoft Corporation

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
ACPGBI
Language
en
Generator
lmsitestarterduke 9.20170804.1.2592
Canonical
https://www.acpgbi.org.uk/

Open Graph

url
https://www.acpgbi.org.uk/
title
Home
locale
en-GB
site:name
ACPGBI

Technology

Server
C11
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (3)

  • code.jquery.com×2
  • fonts.googleapis.com×1
  • www.googletagmanager.com×1

Social

DNS records live

NS
  • dns1.uk2.net
  • dns2.uk2.net
  • dns3.uk2.net
MX
  • 10 eu-smtp-inbound-1.mimecast.com
  • 20 eu-smtp-inbound-2.mimecast.com
  • 40 inboundcluster1.cloudplatform1.com
  • 40 inboundcluster2.cloudplatform1.com
TXT
  • MS=ms16347930
  • 0ed1fe018a09ca55ef0a1c4e1191f643848763647e
  • stripe-verification=1c7655743bbf88e2f743aaeef635804d8a7e77c5d603d02a0534a8d4c7fabb6d

Email authentication partial

SPF
v=spf1 include:eu._netblocks.mimecast.com ~all
softfail (~all)
DMARC
v=DMARC1;p=none;sp=none;adkim=r;aspf=r;pct=100;rf=afrf;ri=86400
policy: none (monitoring only) · sp=none
DKIM
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FrCsVQNkJb5v8Hfu6OsQCis3KU0LSvV5/XMvZBcBsp2NfyIS9/MSaEx2XQFqYeuoXMajcDH/VrKbj8rLV…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqz2KhPt5/jrjLTSTvG+/f6GpDzVtOcybgHX1/1D8PLzN2sfHkrh5BLC2RpdCJ0TtvXLNRWTR1vdw6pxBheDskQw…
selectors probed

Certificate (current)

R12
from 2026-05-02 to 2026-07-31
Expires in 72 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.acpgbi.org.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=*, ambient-light-sensor=*, autoplay=*, battery=*, camera=*, cross-origin-isolated=*, display-capture=*, document-domain=*, encrypted-media=*, execution-while-not-rendered=*, execution-while-out-of-viewport=*, fullscreen=*, geolocation=*, gyroscope=*, keyboard-map=*, magnetometer=*, microphone=*, midi=*, navigation-override=*, payment=*, picture-in-picture=*, publickey-credentials-get=*, screen-wake-lock=*, sync-xhr=*, usb=*, web-share=*, xr-spatial-tracking=*
x-content-type-options
nosniff
content-security-policy
default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' blob:
strict-transport-security
max-age=31536000; includeSubDomains

Links to (10)

Linked from (1)