fact.co.uk

.uk crawl

First seen 2026-04-20 · Last seen 2026-05-18 · ok HTTP/1.1 200 2318 ms crawled 2026-05-13

GB · 35.177.23.173 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: FACT | FACT Liverpool
Description: FACT Liverpool is the UK's leading organisation for the support and exhibition of art, film and new media. Home to galleries, a cinema, café and bar.
Language: en-GB
Generator: SEOmatic
Canonical: https://www.fact.co.uk/

Open Graph

url: https://www.fact.co.uk/
title: FACT Liverpool
locale: en_GB
see also: https://twitter.com/fact_liverpool
site name: FACT
description: FACT Liverpool is the UK's leading organisation for the support and exhibition of art, film and new media. Home to galleries, a cinema, café and bar.

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (3)

www.googletagmanager.com×2
dc.ads.linkedin.com×1
www.facebook.com×1

Social

Contact

Email

Phone

Address

88 Wood Street, L1 4DQ, Liverpool, UK

Registration

Registrar

Fasthosts Internet Ltd

Created

1995-02-21

Expires

2027-02-21 278 days left

Updated

2026-01-22

Name servers

doug.ns.cloudflare.com.
vera.ns.cloudflare.com.

DNS records live

NS

doug.ns.cloudflare.com
vera.ns.cloudflare.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com

TXT

Show 4 TXT records

lqd0uvk5uq4jeocfam347lmqlj
MS=ms38459913
google-site-verification=1giIHn7VhK97ZrF4bnILsuP6vZK4ZhpmP83GtUQYX6Y
google-site-verification=SSFYYRaoxBOUgcf34T2LosdxK_2iO2GgBIi13R_NcqE

Email authentication partial

SPF

v=spf1 include:_spf.google.com include:mxsmtp.sendpulse.com include:servers.mcsv.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

from 2026-05-07 to 2026-08-05

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.fact.co.uk/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src * https: data: blob: android-webview-video-poster: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; frame-ancestors 'self';
strict-transport-security: max-age=31536000; includeSubDomains