indexo.dev

manifesto.co.uk

.uk crawl

First seen 2026-04-24 · Last seen 2026-05-15 · ok HTTP/1.1 200 5446 ms crawled 2026-05-18

US · 104.26.15.204 · AS13335 Cloudflare, Inc.

Reputation 100/100

sector nonprofit type homepage

HTML metadata

Title
manifesto for change | manifesto
Description
We are the digital experience agency for changemakers. We are committed to delivering purposeful and positive impact for people, planet and society, in restless pursuit of a better world.
Language
en

Open Graph

url
https://manifesto.co.uk/
title
manifesto for change | manifesto
description
We are the digital experience agency for changemakers. We are committed to delivering purposeful and positive impact for people, planet and society, in restless pursuit of a better world.

Technology

CDN
Cloudflare
CMS
Next.js
Analytics
  • Plausible

Third-party hosts loaded (3)

  • cdn.cookie-script.com×1
  • js-eu1.hs-scripts.com×1
  • plausible.io×1

Social

Contact

Address
The Hickman (Second Floor), 2 Whitechapel Road, E1 1EW, London

Registration

Registrar
Cloudflare, Inc.
Created
1996-01-30
Expires
2027-01-30 254 days left
Updated
2025-12-31
Name servers
  • eric.ns.cloudflare.com.
  • ines.ns.cloudflare.com.

DNS records live

NS
  • eric.ns.cloudflare.com
  • ines.ns.cloudflare.com
MX
  • 1 aspmx2.googlemail.com
  • 10 aspmx.l.google.com
  • 10 aspmx3.googlemail.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • jamf-site-verification=Z_UIXPILKG1jHS_9oPsEAg
  • jetbrains-domain-verification=e37t00dqqswuer8ttyo4vvwe7
Verified for
  • Atlassian
  • Google
  • Microsoft 365

Email authentication no MX

SPF
v=spf1 a mx include:_spf.google.com include:144793482.spf10.hubspotemail.net ~all
softfail (~all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed

Certificate (current)

WE1
from 2026-04-24 to 2026-07-23
Expires in 63 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://manifesto.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' plausible.io https://va.vercel-scripts.com *.hsforms.net *.hsforms.com *.hscollectedforms.net *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hubspot.com https://cdn.jsdelivr.net https://i.ytimg.com https://www.youtube.com https://vercel.live https://cdn.cookie-script.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://www.gstatic.com; img-src 'self' blob: data: *.hsforms.com *.hubspot.com *.hsappstatic.net *.s3.amazonaws.com *.uksouth01.umbraco.io https://i.ytimg.com https://www.tpximpact.com https://manifesto.co.uk https://picsum.photos https://dev-manifesto.uksouth01.umbraco.io/; media-src 'self' blob: data: *.hsforms.com *.hubspot.com *.uksouth01.umbraco.io https://i.ytimg.com https://www.tpximpact.com https://manifesto.co.uk https://picsum.photos https://dev-manifesto.uksouth01.umbraco.io/; font-src 'self'; object-src 'none'; bas
strict-transport-security
max-age=63072000

Links to (5)

Linked from (1)