mindsum.org

.org crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 658 ms crawled 2026-06-01

GB · 139.59.181.242 · AS14061 DigitalOcean, LLC

Reputation 69/100 wrong cert dmarc monitor-only

Classifying

HTML metadata

Title: Mental health support for children, young people, and families
Description: Mindsum is a mental health social enterprise that offers quality mental health support, AI virtual therapy and resources for young people and families.
Language: en-GB
Canonical: https://www.mindsum.org

Open Graph

title: Mental health support for children, young people, and families
description: Mindsum is a mental health social enterprise that offers quality mental health support, AI virtual therapy and resources for young people and families.

Technology

Server: nginx
CMS: Next.js
JS framework: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (2)

static.landbot.io×1
www.googletagmanager.com×1

Registration

Registrar

GoDaddy.com, LLC

Created

2020-05-29

Expires

2027-05-29 360 days left

Updated

2026-05-31

Name servers

ns11.domaincontrol.com
ns12.domaincontrol.com

DNS records live

NS

ns11.domaincontrol.com
ns12.domaincontrol.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Brevo
Google
Pinterest

Email authentication partial

SPF

v=spf1 include:spf.sendinblue.com mx ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current) wrong cert

R13

from 2026-05-03 to 2026-08-01

Expires in 59 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.mindsum.org/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection

Header values

referrer-policy: no-referrer-when-downgrade
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';
strict-transport-security: max-age=31536000; includeSubDomains

Linked from (1)

maznet.co.uk×1