victimsupport.org.uk

HTML metadata

Title: Home - Victim Support
Description: Victim Support is the independent charity dedicated to supporting victims of crime and traumatic incidents in England and Wales.
Language: en-US
Generator: WordPress Download Manager 3.3.54
Canonical: https://www.victimsupport.org.uk/

Open Graph

url: https://www.victimsupport.org.uk/
title: Home - Victim Support
locale: en_US
site name: Victim Support
description: Victim Support is the independent charity dedicated to supporting victims of crime and traumatic incidents in England and Wales.

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)
Meta Pixel

Third-party hosts loaded (7)

www.google.com×3
cdn-cookieyes.com×2
www.googletagmanager.com×2
connect.facebook.net×1
googleads.g.doubleclick.net×1
static.beaconproducts.co.uk×1
www.gstatic.com×1

Social

Contact

Phone

08 08 16 89 111

Address

st newsLaura Bartlett2026

Registration

Registrar

Verizon Deutschland GMBH

Created

1997-05-15

Expires

2027-05-15 359 days left

Updated

2025-05-08

Name servers

auth0020.ns.eu.uu.net.
auth0030.ns.eu.uu.net.

DNS records live

NS

auth0020.ns.eu.uu.net
auth0030.ns.eu.uu.net

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 4 TXT records

0ed1fe018a9f94bc88cb764d74862560cc8aca9956
ms=56002951
11907072
bw=F23vvJ58t5vCseBpKjrvzI4e5wbGWiZ4U5U8gEt0IK1T

Verified for

Apple
Atlassian
Google
Zoom

Email authentication strong

SPF

v=spf1 a include:eu._netblocks.mimecast.com include:mailgun.org include:servers.mcsv.net include:emaileuc.freshservice.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarcaggregate@victimsupport.org.uk; ruf=mailto:dmarcforensic@victimsupport.org.uk; fo=1;

policy: quarantine

DKIM

default: v=DKIM1; h=sha256; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDP21TE393b90Ns/AxKG5VERifewNvIW/7uXW6093d5U1IFqo6tmn0rDXg8OqQY/EKflWOaLni0…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

Sectigo RSA Domain Validation Secure Server CA

from 2025-10-28 to 2026-11-13

Expires in 176 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.victimsupport.org.uk/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.beaconforms.com *.beaconproducts.co.uk *.bootstrapcdn.com *.calendly.com calendly.com *.cloudflare.com *.doubleclick.net *.facebook.net *.fontawesome.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.myfonts.net *.victimsupport.org.uk *.w.org *.wpdownloadmanager.com *.yoast.com js.stripe.com yoast.com *.youtube.com cdn-cookieyes.com s.ytimg.com; style-src 'self' 'unsafe-inline' *.fontawesome.com *.googleapis.com *.gstatic.com hello.myfonts.net stackpath.bootstrapcdn.com static.userback.io; img-src 'self' data: *.beaconforms.com *.beaconproducts.co.uk *.bootstrapcdn.com *.calendly.com *.cloudflare.com *.doubleclick.net *.facebook.net *.fontawesome.com *.google-analytics.com *.google.com *.google.ro *.google.co.uk *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.myfonts.net *.victimsupport.or