ukcybersecuritycouncil.org.uk

HTML metadata

Title: UK Cyber Security Council
Language: en

Technology

CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Registration

Registrar

GoDaddy.com, LLC.

Created

2020-03-18

Expires

2027-03-18 301 days left

Updated

2026-03-21

Name servers

ns21.domaincontrol.com.
ns22.domaincontrol.com.

DNS records live

NS

ns21.domaincontrol.com
ns22.domaincontrol.com

MX

1 ukcybersecuritycouncil-org-uk.mail.protection.outlook.com

TXT

Show 5 TXT records

_jejc7g9tkmnqbvnhrl97i5lt082dkzm
_zo5zlpqu23ph7vid93kcw0ovn0qkane
_8lpgcr42m06bmqaljfdan4hq2r88x2z
x83x59n10mjy2twm5hzfvz2vx1n8j96s
portal.ukcybersecuritycouncil.org.uk TXT "v=spf1 a ~all"

Verified for

Apple
Google
Microsoft
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com ip4:176.58.125.227 ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:ajeypkcgzw@rua.powerdmarc.com; ruf=mailto:ajeypkcgzw@ruf.powerdmarc.com; pct=100; fo=1;

policy: reject (enforced) · sp=reject

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj4ywYfFzQ1XiE3cflSmHMlQs6RsGv4M1dsPHl8y6uNMsf59nWwD6KmafshGSv3o590FogvOC32bE6…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
mail: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCKKbkY62fnzHOZBHDycOTEuou2zU315rf4SGb6edF5DAsj9ofDIhzqy+ggguQqfZL1H…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC/NSqnQKKiGEH0+E+pfXwmG8oqeZvGJk/sm2KHuiqky3qRF4DsmAScBMmnITKeIqfE5sGlT6yRyHpYweb…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9P1vgD85EO9hIOiQHjdxjr7b//w/GiioMrmY7dfKSijNb2fqGaldY5P4tGjLUyxkeyuomrr8noVXnZlFI…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-09-30 to 2026-09-30

Expires in 132 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.ukcybersecuritycouncil.org.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), autoplay=(self), encrypted-media=(self "https://www.youtube.com" "https://www.youtube-nocookie.com" "https://player.vimeo.com"), fullscreen=(self "https://www.youtube.com" "https://www.youtube-nocookie.com" "https://player.vimeo.com"), picture-in-picture=(self "https://www.youtube.com" "https://www.youtube-nocookie.com" "https://player.vimeo.com")
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vercel.live https://*.vercel.live https://www.googletagmanager.com https://www.google-analytics.com https://googletagmanager.com https://analytics.google.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://js.squareup.com https://js.squareupsandbox.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com https://sandbox.web.squarecdn.com https://web.squarecdn.com; font-src 'self' https://fonts.gstatic.com https://sandbox.web.squarecdn.com https://web.squarecdn.com; img-src 'self' data: https: blob: https://www.google-analytics.com https://www.googletagmanager.com https://analytics.google.com; media-src 'self' data: https:; connect-src 'self' https: wss: https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://pci-connect.squareup.com https
strict-transport-security: max-age=31536000; includeSubDomains