indexo.dev

citb.co.uk

.uk crawl

First seen 2026-04-13 · Last seen 2026-05-18 · ok HTTP/1.1 200 2847 ms crawled 2026-05-07

US · 104.16.0.18 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Home
Description
CITB is the Industry Training Board for the construction industry and a partner in ConstructionSkills, the Sector Skills Council, devoted to building competitive advantage for the construction industry and the people who work in it
Language
en
Canonical
https://www.citb.co.uk/

Open Graph

url
https://www.citb.co.uk/
title
CITB - Construction Industry Training Board
site name
CITB
description
CITB is the Industry Training Board for the construction industry and a partner in ConstructionSkills, the Sector Skills Council, devoted to building competitive advantage for the construction industry and the people who work in it

Technology

CDN
Cloudflare
Analytics
  • Cloudflare Insights
Fonts
  • Google Fonts

Third-party hosts loaded (4)

  • fonts.googleapis.com×4
  • cc.cdn.civiccomputing.com×1
  • fonts.gstatic.com×1
  • static.cloudflareinsights.com×1

Social

Registration

Registrar
123-Reg Limited t/a 123-reg
Created
1999-06-07
Expires
2027-06-07 384 days left
Updated
2025-06-08
Name servers
  • nina.ns.cloudflare.com.
  • peyton.ns.cloudflare.com.

DNS records live

NS
  • nina.ns.cloudflare.com
  • peyton.ns.cloudflare.com
MX
  • 10 citb-co-uk.mail.protection.outlook.com
TXT
Show 8 TXT records
  • asv=5036345b78fd1f898fe9e9d7aa000cbe
  • facebook-domain-verification=544fcccd8j31npzffkqh7thd8aic81
  • QwvfQfZgeWk62MGcXXNgpvaHEqrZO1sC29GDQhTIaYqADKke0TZVLva1fk+2mIKGjbNO/AIlyzBNksWYpeTioA==
  • apple-domain-verification=JEQucYDWeDrBZRzG
  • autodesk-domain-verification=5LtrTFl5oq7DWbujfHpT
  • google-site-verification=5Lo8JrYxSx7rhn8cVkOaysfbACtBl0Jw52RpAwbaNt4
  • miro-verification=febe4ebbd176549ce2ff66a0632dff16dc1f311a
  • 7r884mbld67x1qnhp3v4860wlk734rvn

Email authentication strong

SPF
v=spf1 a mx include:spf.protection.outlook.com include:sendgrid.net include:customers.clickdimensions.com include:_spf.qualtrics.com ip4:195.94.57.128/27 ip4:141.193.32.0/23 ip4:159.135.140.80/29 ip4:159.135.132.128/25 ip4:161.38.204.0/22 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:143.55.236.0/22 ip4:198.244.60.0/22 ip4:204.220.160.0/21 ip4:104.130.122.0/23 ip4:146.20.112.0/26 ip4:161.38.192.0/20 ip4:143.55.224.0/21 ip4:143.55.232.0/22 ip4:159.112.240.0/20 ip4:198.244.48.0/20 ip4:204.220.168.0/21 ip4:204.220.176.0/20 ip4:209.61.151.0/24 ip4:166.78.68.0/22 ip4:198.61.254.0/23 ip4:192.237.158.0/23 ip4:23.253.182.0/23 ip4:104.130.96.0/28 ip4:146.20.113.0/24 ip4:146.20.191.0/24 ip4:159.135.224.0/20 ip4:69.72.32.0/20 -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:dmarc@citb.co.uk
policy: reject (enforced)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDa9zAVONrOzh0OMuPxfHTqj6KlUMXdKrBfTIfNtcGJosx4e0tUh7hCzNXyFSviXB1dgDjP1KCI2XoR+9/HTW…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiBlx4FOheQlDNxX8vd1u67OnSGSdSOtvIIq7olq7JzXsYefhd+SlVs3xnWv7mpyf4LdkTh2I+AKjabBAN…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDmmYNplgty6AW21eOmh7H+bzKlv++vTumIY0le9n9fg9lLJ2HxkkqIX+5udeOshhAPknvvpTJK9LN1dIV0YXBjjZ…
selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1
from 2025-10-15 to 2026-11-16
Expires in 181 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.citb.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self'; default-src 'self' *; script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' *.iadvize.com *.qualtrics.com *.clickdimensions.com *.hotjar.com scripts.clarity.ms googleads.g.doubleclick.net www.clarity.ms bat.bing.com www.browsealoud.com tr.snapchat.com rules.quantcount.com snap.licdn.com sc-static.net connect.facebook.net secure.quantserve.com unpkg.com *.googletagmanager.com *.google-analytics.com cdnjs.cloudflare.com cdn.vev.design js.vev.design embed.vev.page www.google.com api.reciteme.com api.addressy.com cdn.sitesearch360.com js.sitesearch360.com www.gstatic.com maps.googleapis.com cc.cdn.civiccomputing.com rum-static.pingdom.net static.cloudflareinsights.com; style-src 'unsafe-inline' 'report-sample' 'self' *.iadvize.com api.reciteme.com www.gstatic.com fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' data: wss://xmpp-ha-alb.iadvize.com *.clarity.ms *.iadvize.com wss://ws.hotjar.com siteintercept.qualtrics.com *.hotjar
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (7)

Linked from (19)