indexo.dev

ealingfoe.org.uk

.uk crawl

First seen 2026-04-25 · Last seen 2026-05-19 · ok HTTP/1.1 200 2849 ms crawled 2026-05-19

GB · 46.23.69.44 · AS13213 Thg Hosting Limited

Reputation 67/100 wrong cert no dmarc policy

Classifying

HTML metadata

Title
EFoE
Language
en-US

Open Graph

url
https://www.ealingfoe.org.uk/
title
EFoE
description
Who are Friends of the Earth? Ealing Friends of the Earth (EFoE) is part of the world’s largest grassroots environmental network. We campaign on both local Ealing concerns and on national & international environmental issues.

Technology

Server
ESF
Fonts
  • Google Fonts

Third-party hosts loaded (5)

  • lh3.googleusercontent.com×16
  • ssl.gstatic.com×4
  • fonts.googleapis.com×3
  • www.gstatic.com×2
  • apis.google.com×1

Registration

Registrar
UK-2 Limited t/a UK2
Created
2000-04-28
Expires
2027-04-28 343 days left
Updated
2026-03-19
Name servers
  • ns1.stackdns.com.
  • ns2.stackdns.com.
  • ns3.stackdns.com.
  • ns4.stackdns.com.

DNS records live

NS
  • ns1.stackdns.com
  • ns2.stackdns.com
  • ns3.stackdns.com
  • ns4.stackdns.com
MX
  • 10 mx.stackmail.com
TXT
  • google-site-verification=D4WZBqhrkdZluu0RMOgPelQXQLKOelOFslVsYd5a5Bs

Email authentication weak

SPF
v=spf1 include:spf.stackmail.com a mx -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current) wrong cert

E7
from 2026-05-04 to 2026-08-02
Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.ealingfoe.org.uk

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • cross-origin-opener-policy
  • cross-origin-resource-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing Permissions Policy
Header values
referrer-policy
origin
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-l802LLeYFqV8c6FXSAFQoQ' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/
cross-origin-opener-policy
unsafe-none
cross-origin-resource-policy
same-site

Links to (19)

Linked from (1)