swgfl.org.uk

HTML metadata

Title: Online Safety, Safeguarding, Security and Training | SWGfL
Description: SWGfL is a charity dedicated to empowering the safe and secure use of technology through helplines, services, tools and training.
Language: en-gb

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Registration

Registrar

123-Reg Limited t/a 123-reg

Created

2000-03-23

Expires

2027-03-23 306 days left

Updated

2026-03-24

Name servers

ns49.domaincontrol.com.
ns50.domaincontrol.com.

DNS records live

NS

ns49.domaincontrol.com
ns50.domaincontrol.com

MX

0 swgfl-org-uk.mail.protection.outlook.com

TXT

v=verify domain MS=ms66916928
1kks4ktchcn2t0msvmdpgtp25ldlpblz
v=DMARC1;p=none;pct=100;rua=mailto:ed158c1886@rua.easydmarc.eu;ruf=mailto:ed158c1886@ruf.easydmarc.eu;ri=86400;fo=1

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 a include:spf.protection.outlook.com include:mail.zendesk.com include:25765645.spf04.hubspotemail.net include:eu._netblocks.mimecast.com ip4:217.155.223.94 ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:dmarc-rua@dmarc.service.gov.uk; ri=86400; fo=1;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt12srH9kZhEoD8ZwODtXQ3KrrX/5e29Or5qM/PN9eW4H6Hn+RUW5fhizc9boaHzcb0/khR4ymAyfGg…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt12srH9kZhEoD8ZwODtXQ3KrrX/5e29Or5qM/PN9eW4H6Hn+RUW5fhizc9boaHzcb0/khR4ymAyfGg…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv18BFaMx3jjYPt8T2DU5z05QbWBIHnx6kwnD9igU6Y+kPxWuKBGQjFuVslE95j3WJP1d35vkwfrM9mj1J…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xLLszE8+VJXq4oCgtIJdl/twzcSnlVdXIgft3VL+0HcS2EcM1GP/TECuaVRQEWyN+7yKihMbiCTtIUZhC…

selectors probed

Certificate (current)

R12

from 2026-04-09 to 2026-07-08

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://swgfl.org.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(self), camera=(), display-capture=(), fullscreen=(self), geolocation=(), microphone=(), web-share=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google.com https://www.googletagmanager.com; img-src 'self' data: https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.co.uk https://*.gstatic.com https://maps.googleapis.com https://img.evbuc.com https://public.flourish.studio https://www.gravatar.com; script-src 'self' https://*.googletagmanager.com https://www.gstatic.com https://*.google.com https://*.google-analytics.com https://*.google.co.uk https://*.g.doubleclick.net https://maps.googleapis.com https://www.googleadservices.com https://public.flourish.studio 'nonce-X02t5TDbrvZAQ2vf'; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.goog
strict-transport-security: max-age=63072000; includeSubDomains
cross-origin-opener-policy: same-origin