fdf.org.uk

HTML metadata

Title

Home | The Food & Drink Federation

Description

The FDF is the membership body for food and drink manufacturers. Our members benefit from regulatory support, advocacy and chances to network

Language

en

Canonical

https://www.fdf.org.uk/

Translations

cy
en
gd

Open Graph

url: https://www.fdf.org.uk/
title: The Food and Drink Federation
site name: The Food & Drink Federation
description: The FDF is the membership body for food and drink manufacturers. Our members benefit from regulatory support, advocacy and chances to network

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (6)

fonts.googleapis.com×2
addevent.com×1
dl.episerver.net×1
fonts.gstatic.com×1
placehold.co×1
www.googletagmanager.com×1

Social

Contact

Phone

020 7836 2460

Address

6th Floor, 10 Bloomsbury Way, London, WC1A 2SL

Registration

Registrar

Tucows Inc t/a Tucows

Created

1998-03-31

Expires

2027-03-31 314 days left

Updated

2026-03-02

Name servers

dns0.star.co.uk.
dns1.star.co.uk.

DNS records live

NS

dns0.star.co.uk
dns1.star.co.uk

MX

0 fdf-org-uk.mail.protection.outlook.com

TXT

/n6ysXUbdBqHxO1qaRrytcJKMeJgfNW9zFgn575zvQ9kFM5N9bCsQVuFwZkUfR1D4FVOO3VjhuoX3mSzw824lw==

Verified for

Apple
Google
Microsoft 365
Stripe

Email authentication strong

SPF

v=spf1 ip4:89.197.88.164 include:spf.protection.outlook.com include:servers.mcsv.net include:spf.mandrillapp.com include:theaccessgroupSPF.smtp.com include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=quarantine;rua=mailto:dmarc_agg@vali.email;ruf=mailto:dmarc.reports@fdf.org.uk; ri=86400; fo=1;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlzVd+84avFqB+gr4FQHj67nf2q+S+HhT5SRxtQjv0hxL/hvmSbGzUMBdSg/PnaTmGaos0FyPDYF+wyfp96E…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-07-18 to 2026-08-19

Expires in 90 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.fdf.org.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com https://*.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://polyfill.io https://*.msecnd.net https://*.visualstudio.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://*.episerver.net https://tagmanager.google.com https://snap.licdn.com https://consent.cookiebot.com https://www.youtube.com/iframe_api https://s.ytimg.com https://*.cookiebot.com https://addevent.com https://*.fullstory.com https://optimize.google.com https://cdn.addevent.com https://www.googleoptimize.com https://*.hotjar.com https://www.addevent.com/libs/atc/1.6.1/atc.min.js https://js.monitor.azure.com/scripts/a/ai.0.js; connect-src 'self' https://dc.services.visualstudio.com https://www.google-analytics.com https://stats.g.doubleclick.n
strict-transport-security: max-age=300; includeSubDomains;