thebigdraw.org

.org crawl

First seen 2026-04-21 · Last seen 2026-05-15 · ok HTTP/1.1 200 6137 ms crawled 2026-05-15

GB · 35.177.23.173 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Home - The Big Draw
Description: Campaigning for drawing since 2000Join our global movement - let's get everyone drawing!
Language: en
Canonical: https://www.thebigdraw.org/

Open Graph

url: https://www.thebigdraw.org/
title: Home - The Big Draw
site name: The Big Draw
description: Campaigning for drawing since 2000Join our global movement - let's get everyone drawing!

Social

Contact

Email

Phone

+44(0)2037584118

Registration

Registrar

IONOS SE

Created

2006-12-10

Expires

2026-12-10 204 days left

Updated

2026-04-29

Name servers

ns-1249.awsdns-28.org
ns-1642.awsdns-13.co.uk
ns-69.awsdns-08.com
ns-879.awsdns-45.net

DNS records live

NS

ns-1249.awsdns-28.org
ns-1642.awsdns-13.co.uk
ns-69.awsdns-08.com
ns-879.awsdns-45.net

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=QCEDu4tCHiOhEnkQlVBoH4FQXg-0Gvhr_odfn9bgLP4
MS=ms63043256
google-site-verification=NFEo1Pgv57P8dusgH7KSuf5x3VenQy6Dl1rskjMMpzg

Email authentication partial

SPF: v=spf1 mx a ip4:84.22.185.99/32 a:servers.mcsv.net a:aspmx.l.google.com a:alt1.aspmx.l.google.com a:alt2.aspmx.l.google.com a:aspmx2.googlemail.com a:aspmx3.googlemail.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

from 2026-03-18 to 2026-06-16

Expires in 27 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.thebigdraw.org/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src * https: data: blob: android-webview-video-poster: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; frame-ancestors 'self';
strict-transport-security: max-age=31536000; includeSubDomains

Links to (11)

Linked from (1)

guildofstgeorge.org.uk×2