fundraisingregulator.org.uk

HTML metadata

Title: Ethical fundraising, sustainable giving | Fundraising Regulator
Description: We regulate charity fundraising in England, Wales and Northern Ireland. We work to improve fundraising standards and build public trust.
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.fundraisingregulator.org.uk/

Open Graph

url: https://www.fundraisingregulator.org.uk/home-page
title: Ethical fundraising, sustainable giving
site name: Fundraising Regulator
description: The Fundraising Regulator is the independent regulator of charitable fundraising. We were established following the Etherington review of fundraising self-regulation to strengthen the system of charity regulation and restore public trust in fundraising.

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Phone

0300 999 3407

Registration

Registrar

Cloudflare, Inc.

Created

2016-01-18

Expires

2027-01-18 242 days left

Updated

2025-12-19

Name servers

beth.ns.cloudflare.com.
earl.ns.cloudflare.com.

DNS records live

NS

beth.ns.cloudflare.com
earl.ns.cloudflare.com

MX

10 mx1-eu1.ppe-hosted.com
19 mx2-eu1.ppe-hosted.com

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.google.com include:_spf.salesforce.com include:_spf.createsend.com include:spf1.formassembly.com a:dispatch-eu.ppe-hosted.com ip4:185.199.221.189/32 ip4:154.48.212.0/24 ip4:203.55.21.31/32 ip4:100.42.120.96/27 ip4:100.42.115.0/27 ip4:208.70.208.0/22 ip6:2a03:2800:500::1aa -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@fundraisingregulator.org.uk,mailto:dmarc@wearepenelope.co.uk

policy: quarantine

DKIM

google: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+5do1KYBknwNOjmHWpMKevWXrFNHBd64OksqdfCJiuUlOiWmAzFgdWWAKja5TNIGuaC6KI4I9md2oSvbBLnF3LKyQ3Om…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt8IveQjEVXN5y8PpWg4VLokXhTr6GdT0x85cbhderOO0XGC6nlDyB5lu7lVrgVL0AxushyhidHgGP…

selectors probed

Certificate (current)

WE1

from 2026-04-23 to 2026-07-22

Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.fundraisingregulator.org.uk/

present

content-security-policy
x-frame-options
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://connect.facebook.net https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://script.crazyegg.com https://snap.licdn.com https://www.tfaforms.com https://static.hotjar.com https://script.hotjar.com https://www.riddle.com https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' https://cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://www.tfaforms.com https://cdnjs.cloudflare.com; worker-src 'self' blob:; frame-ancestors 'self'