thefosteringnetwork.org.uk

.uk crawl

First seen 2026-04-23 · Last seen 2026-05-18 · ok HTTP/1.1 200 13009 ms crawled 2026-05-18

US · 104.26.7.13 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Home
Language
en-GB

Open Graph

url
https://www.thefosteringnetwork.org.uk/
title
Test title
description
Test description

Technology

CDN
Cloudflare
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (3)

  • fonts.googleapis.com×2
  • fonts.gstatic.com×1
  • www.googletagmanager.com×1

Social

Registration

Registrar
123-Reg Limited t/a 123-reg
Created
2015-04-29
Expires
2027-04-29 344 days left
Updated
2025-03-07
Name servers
  • lily.ns.cloudflare.com.
  • nico.ns.cloudflare.com.

DNS records live

NS
  • lily.ns.cloudflare.com
  • nico.ns.cloudflare.com
MX
  • 10 mail1.communicatoremail.com
  • 10 mail2.communicatoremail.com
TXT
Show 6 TXT records
  • v9t3hor1co0fin56knlf2hh0l9
  • 5u91o2ru7dhpjso3oca868pg4e
  • 7PLHAV0UTPKA8HF3VCCT5ISD3
  • google-site-verification=WEOZxTEseHUoyOqelvJnDyICrGVls8Op_9YnTx6yGk0
  • spf2.0/pra include:senderid.communicatoremail.com -all
  • v418kngdlqdo4tqpg1e65j1gb8

Email authentication weak

SPF
v=spf1 include:spf.communicatoremail.com include:_spf.emailcampaigns.net -all
strict (-all)
DMARC
not published
DKIM
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy52iA1WT7N+B3V+QgA5SHAvErOqlnzUJO1wFFL8bQ7ZjOdJ2wITvahsmo95QfRKyqHarH9xfY3fl1VN4PU…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJgqlpWLTWOHdoXsRwwgjA1IMIYCe0U8csMKKLvygyRRj2jhhgKRv0SwE7igMejDrdnkz/zjsNzu3J9B+gWu/CHI…
selectors probed

Certificate (current)

WE1
from 2026-04-25 to 2026-07-24
Expires in 65 days

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.thefosteringnetwork.org.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • short HSTS max-age
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
microphone=(),autoplay=(self "https://*.youtube.com" "https://*.vimeo.com"),camera=(),accelerometer=(),display-capture=self,encrypted-media=self,fullscreen=(self "https://*.youtube.com" "https://*.vimeo.com"),geolocation=self,gyroscope=(),magnetometer=self,midi=(),picture-in-picture=(self "https://*.youtube.com" "https://*.vimeo.com"),publickey-credentials-get=self,sync-xhr=self,usb=(),xr-spatial-tracking=()
x-content-type-options
nosniff
content-security-policy
script-src *.cloudfront.net *.craftyclicks.co.uk *.flippingbook.com *.googletagmanager.com connect.facebook.net 'self' 'unsafe-eval' 'unsafe-inline' 'nonce-uk/40P49+LDTih42QyGpx/po';frame-src *.doubleclick.net *.flippingbook.com *.google.com *.vimeo.com *.youtube.com forms.office.com 'self';font-src *.gstatic.com data: 'self';img-src data: https: 'self';connect-src https: 'self';style-src https: 'self' 'unsafe-inline';default-src 'self'
strict-transport-security
max-age=2592000

Links to (7)

Linked from (5)