indexo.dev

forgeandcraft.co.uk

.uk crawl

First seen 2026-04-20 · Last seen 2026-05-17 · ok HTTP/1.1 200 2138 ms crawled 2026-05-14

US · 5.78.24.5 · AS212317 Hetzner Online GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Forge & Craft
Description
Pen plotter art, 3D printing, vinyl cutting, electronics, craft. Wimbledon, UK. A Forge & Craft Original is created by humans collaborating with algorithms and robots.
Language
en

Open Graph

url
https://forgeandcraft.co.uk
title
Forge & Craft: Pen Plotter Art and Making
site name
Forge & Craft
description
Pen plotter art, 3D printing, vinyl cutting, electronics, craft. Wimbledon, UK.

Technology

Analytics
  • Google Tag Manager
Fonts
  • Adobe Fonts
Social widgets
  • YouTube Embed
Third-party hosts loaded (10)
  • cdn.cache.lol×3
  • cdn.some.pics×3
  • use.typekit.net×2
  • www.googletagmanager.com×2
  • glitch.com×1
  • macaw.social×1
  • metapixl.com×1
  • profiles.cache.lol×1
  • www.instagram.com×1
  • www.youtube.com×1

Social

Registration

Registrar
Tucows Inc t/a Tucows
Created
2023-01-27
Expires
2027-01-27 253 days left
Updated
2026-01-26
Name servers
  • ns1.messagingengine.com.
  • ns2.messagingengine.com.

DNS records live

NS
  • ns1.messagingengine.com
  • ns2.messagingengine.com
MX
  • 10 in1-smtp.messagingengine.com
  • 20 in2-smtp.messagingengine.com
TXT
  • proven.lol/33f7d0
  • google-site-verification=ejVk3SYVzfN4Zf3A9gcSXX0AtoiwMpzM9nLDEMnn3lU

Email authentication partial

SPF
v=spf1 include:spf.messagingengine.com ?all
neutral (?all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

E8
from 2026-05-11 to 2026-05-18
Expired 1 day ago

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://forgeandcraft.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
Header values
referrer-policy
no-referrer-when-downgrade
permissions-policy
geolocation=(self)
x-content-type-options
nosniff
content-security-policy
default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:
strict-transport-security
max-age=31536000

Links to (16)

Linked from (2)