airedale-trust.nhs.uk

.uk crawl

First seen 2026-04-19 · Last seen 2026-05-16 · ok HTTP/1.1 200 12502 ms crawled 2026-05-13

GB · 35.214.26.195 · AS15169 Google LLC

Reputation 100/100

sector health type homepage

HTML metadata

Title: Airedale NHS Foundation Trust
Description: Airedale NHS Foundation Trust is an NHS Foundation Trust based in West and North Yorkshire, England; it also serves part of East Lancashire.
Language: en-GB
Generator: WordPress 6.9.4
Canonical: https://www.airedale-trust.nhs.uk/

Open Graph

url: https://www.airedale-trust.nhs.uk/
title: Airedale NHS Foundation Trust
locale: en_GB
site name: Airedale NHS Foundation Trust
description: Airedale NHS Foundation Trust is an NHS Foundation Trust based in West and North Yorkshire, England; it also serves part of East Lancashire.

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

fonts.googleapis.com×2
translate.google.com×2
www.cqc.org.uk×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Phone

DNS records live

NS

ns1.nhs.uk
ns2.nhs.uk
ns3.nhs.uk
ns4.nhs.uk

TXT

pb00a29cgcsacpqj482hv7hnbv

Verified for

Brevo

Email authentication no MX

SPF

not published

DMARC

not published

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

R12

from 2026-04-29 to 2026-07-28

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.airedale-trust.nhs.uk/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://assets.freshsales.io https://cdnjs.cloudflare.com https://webform.freshsales.io https://www.google-analytics.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.cqc.org.uk https://translate.google.com https://www.google.com https://translate.googleapis.com https://www.gstatic.com https://translate-pa.googleapis.com https://feeds.trac.jobs; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.bunny.net https://d952cmcgwqsjf.cloudfront.net https://code.ionicframework.com https://www.cqc.org.uk https://www.gstatic.com https://feeds.trac.jobs; object-src 'none'; base-uri 'self'; connect-src 'self' https://region1.google-analytics.com https://www.google-analytics.com https://www.google.com https://translate.googleapis.com https://feeds.trac.jobs https://translate-pa.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.bunny.net h
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-resource-policy: same-origin