bto.org

.org crawl

First seen 2026-04-18 · Last seen 2026-05-19 · ok HTTP/1.1 200 4353 ms crawled 2026-05-13

US · 104.26.8.181 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

sector other type homepage

HTML metadata

Title

Home | BTO

Language

en-gb

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://www.bto.org/

Translations

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Cloudflare Insights
Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

www.googletagmanager.com×3
cdn.jsdelivr.net×2
fonts.googleapis.com×2
challenges.cloudflare.com×1
static.cloudflareinsights.com×1

Social

Contact

Phone

1842 750050

Address

st for Ornithology (BTO)The Nunnery, Thetford, Norfolk, IP24 2PU+44 (0)1842

Registration

Registrar

NameCheap, Inc.

Created

1996-08-14

Expires

2026-08-13 84 days left

Updated

2025-07-26

Name servers

ingrid.ns.cloudflare.com
roan.ns.cloudflare.com

DNS records live

NS

ingrid.ns.cloudflare.com
roan.ns.cloudflare.com

MX

Show 7 MX records

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com
30 aspmx4.googlemail.com
30 aspmx5.googlemail.com

TXT

41992c399eaf403bb2151a9c58e89138

Verified for

Google
Microsoft 365

Email authentication partial

SPF

v=spf1  ip4:139.222.132.0/24 ip4:188.39.73.166 ip4:188.39.73.164 ip4:62.64.211.42 ip4:62.64.211.43 ip4:62.64.211.46 ip4:156.70.24.125 include:_spf.google.com include:_spf.sparkpostmail.com include:shops.shopify.com include:spf.protection.outlook.com include:eu.rp.oracleemaildelivery.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:d481ca3f76f945049074345a8d6515f4@dmarc-reports.cloudflare.net,mailto:webmaster@bto.org

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCSlb2uUtTaZp9maMTmyFL/PFgHwjE4zNfNT3EmFq/3580O9sIcOLetcE/3QRI/CKyQGCRMYViRYUNjbUhWOU…

selectors probed

Certificate (current)

WE1

from 2026-05-03 to 2026-08-01

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bto.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors webtest.bto.org webtest2.bto.org www.bto.org app.bto.org data.bto.org cftest.bto.org ociweb.bto.org;
strict-transport-security: max-age=31536000; preload; includeSubDomains