northerngasnetworks.co.uk

.uk crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 7984 ms crawled 2026-05-19

GB · 188.166.138.2 · AS14061 DigitalOcean, LLC

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Home | Northern Gas Networks
Language: en-GB
Generator: WordPress 6.9.4
Canonical: https://www.northerngasnetworks.co.uk/

Open Graph

url: https://www.northerngasnetworks.co.uk/
title: Home | Northern Gas Networks
locale: en_GB
site name: Northern Gas Networks
description: We’re Northern Gas Networks Our vision is a fairer, greener future for the North of England. We deliver gas to 2.9 million homes and businesses. We...

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (10)

northerngasnetworks.ams3.digitaloceanspaces.com×14
cdn.jsdelivr.net×3
unpkg.com×3
ajax.googleapis.com×2
code.highcharts.com×2
maps.googleapis.com×2
use.typekit.net×2
ngn.ebm.ai×1
www.facebook.com×1
www.googletagmanager.com×1

Contact

Phone

0800 040 7766

Registration

Registrar

Gandi

Created

2005-10-25

Expires

2026-10-25 157 days left

Updated

2025-09-20

Name servers

ns-1052.awsdns-03.org.
ns-1656.awsdns-15.co.uk.
ns-453.awsdns-56.com.
ns-706.awsdns-24.net.

DNS records live

NS

ns-1052.awsdns-03.org
ns-1656.awsdns-15.co.uk
ns-453.awsdns-56.com
ns-706.awsdns-24.net

TXT

Show 4 TXT records

_e0731ymw4v03xau2prswinrqa5wueds
_xsrixtttn8vqydddel0oxn1xbnseka9
fw0d8zhwqrbfbhrxpcjxdpf4x89s9hpq
_3z77x465sjt2jfi7k035d5yx3hccje7

Verified for

Google

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-09-11 to 2026-09-25

Expires in 127 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.northerngasnetworks.co.uk/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdn.jsdelivr.net https://code.highcharts.com https://connect.facebook.net https://maps.googleapis.com https://ngn.ebm.ai https://portal.roadworks.org https://scripts.clarity.ms https://unpkg.com https://use.typekit.net https://www.clarity.ms https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://api.reciteme.com; worker-src 'self' blob:;