bsagroup.org.uk

.uk crawl

First seen 2026-04-13 · Last seen 2026-05-10 · ok HTTP/1.1 200 1140 ms crawled 2026-05-07

US · 162.159.134.42 · AS13335 Cloudflare, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

sector nonprofit type blog

HTML metadata

Title: Welcome to BSA Group | BSA Group
Description: BSA Group’s mission is to support excellence in boarding, safeguarding, inclusion and health education.
Language: en-GB
Generator: All in One SEO (AIOSEO) 4.9.5.1
Canonical: https://www.bsagroup.org.uk/

Open Graph

url: https://www.bsagroup.org.uk/
title: Welcome to BSA Group | BSA Group
locale: en_GB
site name: BSA Group -
description: BSA Group’s mission is to support excellence in boarding, safeguarding, inclusion and health education.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

Iubenda

Fonts

Google Fonts

Third-party hosts loaded (8)

cdn.iubenda.com×3
fonts.googleapis.com×3
cdnjs.cloudflare.com×2
static.addtoany.com×2
www.googletagmanager.com×2
cs.iubenda.com×1
fonts.gstatic.com×1
gmpg.org×1

Social

Contact

Email

Phone

+44 (0) 20 7798 1500

Address

rd View|High Visibility© Copyright BSA Group 2026

Registration

Registrar

Gandi

Created

2021-01-08

Expires

2027-01-08 233 days left

Updated

2025-12-08

Name servers

ns-124-a.gandi.net.
ns-162-c.gandi.net.
ns-82-b.gandi.net.

DNS records live

NS

ns-124-a.gandi.net
ns-162-c.gandi.net
ns-82-b.gandi.net

MX

0 bsagroup-org-uk.mail.protection.outlook.com

TXT

MS=ms74443499

Email authentication strong

SPF

v=spf1 +ip4:78.137.119.78 +ip4:142.0.187.42 include:relay.kinstamailservice.com include:spf.protection.outlook.com include:_spf.brightspace.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc@imprezait.co.uk

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsefuAFSEbarNYzzLwhuPCwr4ZS7mPiCHkLLE9F/dmdctbIIv/69F2/X2gVoC72vCVSuOeIyWhckZqP…

selectors probed

Certificate (current)

WE1

from 2026-03-15 to 2026-06-13

Expires in 25 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.bsagroup.org.uk/

present

x-content-type-options
permissions-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
x-content-type-options: nosniff