hfea.gov.uk

.uk crawl

First seen 2026-04-17 · Last seen 2026-05-19 · ok HTTP/1.1 200 754 ms crawled 2026-05-12

IE · 13.79.38.229 · AS8075 Microsoft Corporation

Reputation 95/100 weak security headers

sector government type homepage

HTML metadata

Title: HFEA: UK fertility regulator
Description: We are the UK's independent regulator of fertility treatment and research using human embryos.
Language: en-GB

Open Graph

url: https://www.hfea.gov.uk/
title: HFEA: UK fertility regulator
locale: en_GB
site name: Human Fertilisation & Embryology Authority (HFEA)
description: We are the UK's independent regulator of fertility treatment and research using human embryos.

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Third-party hosts loaded (3)

hfeagb.sharepoint.com×1
maps.googleapis.com×1
www.googletagmanager.com×1

Social

Contact

Address: 2nd floor, 2 Redman Place, E20 1JQ, London, United Kingdom

Registration

Registrar

Claranet Ltd

Created

2001-03-30

Expires

2027-03-30 314 days left

Updated

2026-03-30

Name servers

ns0.clara.net
ns1.clara.net

DNS records live

NS

ns0.clara.net
ns1.clara.net

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 4 TXT records

access-domain-verification=6bb52275403824ba9586c8eed7bf49c9297223adee3075b2bf3290aacb515791
B024-5FFD-C430-6B69-37F9-B5CC-0FDC-6A59
P5TYg+XoatzYmS2rr55woY50aIHGYfOyHpBmkIEGLgtREQQX3R2EJ6k7faMHz12YVdwo1spgjC16cXk9X2beZQ==
0ed1fe018afef7c9ee37f5471f9a3544df3a8eda10

Verified for

GlobalSign
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:51.105.9.28 include:spf.protection.outlook.com include:spf.zoho.eu include:eu.transmail.net include:spf.zohomail360.eu include:eu._netblocks.mimecast.com include:sendgrid.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc-rua@dmarc.service.gov.uk, mailto:dmarc_agg@vali.email;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9rjY6afzvQ6AlzHxP2JwvL/OsJIrfg8qIjEUqhi18ZWR7DDf0EtPQ1unfZTQJwVbem2EVMmx73PfT075Z+2…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/qf8ItujtGqNe1axNRNzjAg3UQVWfPtVY7SxQOoLubzqbqEzfA+EFrqENRddqOStG20E9mkpVsxmp…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi2KYnVjO3H1+TBZer3xmOsMYDeNYfsMf/oFQKpj001UuEVHu6ODjZw+E55mBGI7d6OQFDAyI8okz2WfCc…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVvn8Bxt1mO6hkonZS0TYKd8WARjMABl0EmauL4Dv8rkXZplGv9dUlmvXCPev4pSiPkHiKKTjTV+jBDB0j…

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-10-21 to 2026-11-22

Expires in 186 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.hfea.gov.uk/

present

x-frame-options

findings

missing HSTS
missing Content Security Policy
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN