indexo.dev

nbcc.police.uk

.uk crawl

First seen 2026-04-19 · Last seen 2026-05-09 · ok HTTP/1.1 200 6029 ms crawled 2026-05-13

US · 172.67.131.187 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
NBCC National Business Crime Centre
Description
Welcome to the National Business Crime Centre. This is a resource for police and businesses to learn, share and support each other to prevent and combat crime.
Language
en-gb
Generator
Joomla! - Open Source Content Management
Canonical
https://nbcc.police.uk/

Technology

CDN
Cloudflare
CMS
Joomla
Analytics
  • Google Tag Manager

Third-party hosts loaded (1)

  • www.googletagmanager.com×1

DNS records live

NS
  • cecelia.ns.cloudflare.com
  • miles.ns.cloudflare.com
MX
  • 10 mxa.eu.mailgun.org
  • 10 mxb.eu.mailgun.org

Email authentication partial

SPF
v=spf1 include:mailgun.org -all
strict (-all)
DMARC
v=DMARC1; p=none; pct=100; fo=1; ri=3600; rua=mailto:ea7e0ff1@dmarc.mailgun.org,mailto:332a1e3d@inbox.ondmarc.com; ruf=mailto:ea7e0ff1@dmarc.mailgun.org,mailto:332a1e3d@inbox.ondmarc.com;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-03-17 to 2026-06-15
Expires in 26 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://nbcc.police.uk/

present
  • strict-transport-security
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
findings
  • missing Content Security Policy
Header values
referrer-policy
unsafe-url
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(), autoplay=(self), camera=(), clipboard-read=(self), clipboard-write=(self), display-capture=(), encrypted-media=(), fullscreen=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=()
x-content-type-options
nosniff
strict-transport-security
max-age=15552000; includeSubDomains
cross-origin-opener-policy
same-origin

Linked from (1)