dofe.org

HTML metadata

Title

DofE - The Duke of Edinburgh's Award

Description

We help young people build lifelong belief in themselves, follow their passions and discover talents they never knew they had.

Language

en-US

Generator

WPML ver:4.4.11 stt:1,11;

Canonical

https://www.dofe.org/

Translations

cy
en-us

Open Graph

url: https://www.dofe.org/
title: DofE - The Duke of Edinburgh's Award
locale: en_US
site name: The Duke of Edinburgh's Award
description: We help young people build lifelong belief in themselves, follow their passions and discover talents they never knew they had.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Cloudflare Insights
Google Tag Manager

Cookie consent

Cookiebot

Fonts

Google Fonts

Third-party hosts loaded (12)

static.queue-it.net×2
consent.cookiebot.com×1
fonts.googleapis.com×1
fonts.gstatic.com×1
gmpg.org×1
js.stripe.com×1
kit.fontawesome.com×1
px.ads.linkedin.com×1
static.cloudflareinsights.com×1
www.facebook.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Address: rd is a registered charity in England and Wales (10724

Registration

Registrar

Easyspace Limited

Created

2001-04-10

Expires

2027-04-10 326 days left

Updated

2025-03-16

Name servers

liz.ns.cloudflare.com
sid.ns.cloudflare.com

DNS records live

NS

liz.ns.cloudflare.com
sid.ns.cloudflare.com

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com
50 o10.mail.cascadecloud.co.uk

TXT

Show 9 TXT records

google-site-verification=LScdeEpflWT4NiCWBVIXI_VMCbhro7nEuC_vR5QymTo
google-site-verification=TfkxFFKKeo8Fih9_1Z-hxTv__nInpFrnfF0JzVVkTuE
google-site-verification=uGtZra-aj0VJD0nqNXIhsQr6jVB3Wv3u7QhZzshDVgM
MS=ms72947613
_globalsign-domain-verification=LU7cd1u_IOmH_z2n7By1gAEzpwmSxkd1T8Gecd7r0h
_globalsign-domain-verification=wVlmj82J2jq3wrFU0zHQKlHTx26xkSxpC8XeDWQFn6
docusign=6a7c077a-ba7f-4b13-a25c-3d8264d7b5b9
docusign=ac8e384e-d9c9-4e8e-840f-40f27890de79
facebook-domain-verification=2rktsh06riepa0oly8oqn6wj4yzyfc

Email authentication strong

SPF: v=spf1 include:eu._netblocks.mimecast.com include:mail.zendesk.com include:spf.protection.outlook.com ip4:192.254.125.237 -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:dmarc_reports@dofe.org; ruf=mailto:dmarc_reports@dofe.org; fo=1;
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

GlobalSign GCC R3 DV TLS CA 2020

from 2026-04-15 to 2026-10-31

Expires in 165 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.dofe.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: deny
permissions-policy: geolocation=(self), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(self "https://www.youtube.com"), fullscreen=(self "https://www.youtube.com"), payment=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://stories.dofe.org https://px.ads.linkedin.com https://iframely.shorthand.com https://gateway.shorthand.com https://analytics.shorthand.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://maps.googleapis.com https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://js.stripe.com https://connect.facebook.net https://s.po.st https://static.assets-queue-it.net https://assets.assets-queue-it.net https://ajax.cloudflare.com https://static.queue-it.net https://assets.queue-it.net https://dofe.queue-it.net https://addevent.com https://cdn.addevent.com https://www.youtube.com https://snap.licdn.com https://static.hotjar.com https://script.hotjar.com https://www.tiktok.com https://lf16-tiktok-web.ttwstatic.com https://kit.fontawesome.com https://*.googletagmanager.com https://*.twitter.com https://*.x.com https://challenges.cloudfl
strict-transport-security: max-age=0; includeSubDomains; preload