londonmarathonfoundation.org

HTML metadata

Title

London Marathon Foundation | London Marathon Foundation

Description

The London Marathon Foundation believes that participating in sport and physical activity has the power to change lives. We're one of the UK’s major funders of projects and initiatives that inspire children and adults across the UK to lead active and healthy lives.

Language

en

Canonical

https://www.londonmarathonfoundation.org/

Translations

en

Open Graph

url: https://www.londonmarathonfoundation.org/london-marathon-foundation
title: London Marathon Foundation
site name: London Marathon Foundation
description: The London Marathon Foundation believes that participating in sport and physical activity has the power to change lives. We're one of the UK’s major funders of projects and initiatives that inspire children and adults across the UK to lead active and healthy lives.

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (2)

static.cloudflareinsights.com×1
www.googletagmanager.com×1

Social

Contact

Address: st Limited, a registered charity (28381

Registration

Registrar

GoDaddy.com, LLC

Created

2023-01-26

Expires

2027-01-26 250 days left

Updated

2025-03-12

Name servers

piotr.ns.cloudflare.com
uma.ns.cloudflare.com

DNS records live

NS

piotr.ns.cloudflare.com
uma.ns.cloudflare.com

MX

0 londonmarathonfoundation-org.mail.protection.outlook.com

TXT

T0H0E19700

Verified for

Google
Miro

Email authentication strong

SPF

v=spf1 a ip4:188.39.17.229 include:spf.protection.outlook.com include:amazonses.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;rua=mailto:postmaster@londonmarathonfoundation.org;fo=1

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD03ZoqcCGQ4o2F4pHHdGi6av30S2cs9A5HscPaxZpF7NnnLvQCQFjwGStPw0m8f8S+afq75FkbN+K…

selectors probed

Certificate (current)

WE1

from 2026-04-04 to 2026-07-03

Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.londonmarathonfoundation.org/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy

findings

missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: report-uri /report-csp-violation
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy-report-only: default-src 'self'; connect-src 'self' https://api.mixpanel.com https://api-js.mixpanel.com https://api-eu.mixpanel.com https://www.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https://www.youtube.com https://tagheuer-tcs-london.vercel.app https://vimeo.com/; img-src *; media-src *; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.uk.exponea.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://cookie-cdn.cookiepro.com https://cdn.mxpnl.com https://cdn-dev.mxpnl.com https://mixpanel.com https://*.mixpanel.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; webrtc 'block'; worker-src 'self' blob: