gdc-uk.org

HTML metadata

Title: General Dental Council
Language: en
Generator: Sitefinity 15.2.8430.0 DX
Canonical: https://www.gdc-uk.org/

Open Graph

url: https://www.gdc-uk.org/home
title: Home
site name: General Dental Council

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

code.jquery.com×4
fonts.googleapis.com×2
www.googletagmanager.com×2

Social

Contact

Phone

20 7167 6000

Address

37 Wimpole StreetLondon W1G 8DQ+44 (0) 20 7167 6000

Registration

Registrar

Network Solutions, LLC

Created

1997-12-10

Expires

2031-12-09 2030 days left

Updated

2021-12-09

Name servers

clay.ns.cloudflare.com
marge.ns.cloudflare.com

DNS records live

NS

clay.ns.cloudflare.com
marge.ns.cloudflare.com

MX

0 gdcuk-org0i.mail.protection.outlook.com

TXT

SFMC-wFSjHbhlnYmWZG6hr2r-cL46qIn7AAn-6t6FH-MM

Email authentication strong

SPF

v=spf1 ip4:51.52.248.140/28 ip4:51.52.248.148/28 ip4:80.6.91.150 include:cust-spf.exacttarget.com include:spf.protection.outlook.com include:spf.mailjet.com include:amazonses.com include:email.prnewswire.com include:docebosaas.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; fo=1; rua=mailto:dmarc_rua@gdc-uk.org; ruf=mailto:dmarc_ruf@gdc-uk.org

policy: quarantine

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRXzH0mG6+1c7YA8O4rDfek+d0xXU3svjeud7E5PaqdknYb+p+bk5t1ue6/SygJ5BanwtT0nVDcYZy…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNltlgaZOMr+bgcpaXF5JB+K8068ONQfaRn5yzseNzjMEkU5IVvnYgGUuRfWR6xiIiZW6JIKuUJ6o8U+Q4MD…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVO6Ux4I/Ic0nBnpV7gAZ70LkHKXNTjgtq/RW4olVsnn3n6RSZqQIyze8IcsNf4T96fbo16slB1X0NtkP…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxeNI6N5nqfW+p6ldo5QN6YQ1Kss54nBp2AD0+7WcQ/tsw47fj5fdixT/olsN4ZA+lGx0fTqyhJ1zOyXEiiv1mD8…

selectors probed

Certificate (current) wrong cert

Microsoft TLS G2 RSA CA OCSP 16

from 2026-04-08 to 2026-10-05

Expires in 139 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.gdc-uk.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://www.youtube.com/iframe_api https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.icontentall.co.uk *.googletagmanager.com *.google.com http://tagmanager.google.com https://tagmanager.google.com http://tagmanager.google.com/debug* https://tagmanager.google.com/debug* *.jquery.com cdnjs.cloudflare.com 'self' web-chat.nativechat.com cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com https://cdn.insight.sitefinity.com htt
strict-transport-security: max-age=31536000; includeSubDomains