chesterfieldroyal.nhs.uk

.uk crawl

First seen 2026-06-02 · Last seen 2026-06-02 · ok HTTP/1.1 200 2309 ms crawled 2026-06-02

GB · 185.220.62.187 · AS61323 Ans Academy Limited

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Home :: Chesterfield Royal Hospital
Language: en
Generator: Concrete CMS
Canonical: https://www.chesterfieldroyal.nhs.uk/

Open Graph

url: https://www.chesterfieldroyal.nhs.uk/
title: Home :: Chesterfield Royal Hospital
locale: en_GB
site name: Chesterfield Royal Hospital

Technology

Server: Apache
CMS: Drupal

Third-party hosts loaded (3)

cdnjs.cloudflare.com×2
translate.google.com×1
www.cqc.org.uk×1

Social

Contact

Phone

01246%20277%20271

DNS records live

NS

ns1.nhs.uk
ns2.nhs.uk
ns3.nhs.uk
ns4.nhs.uk

MX

50 mail.nhs.uk

Verified for

GlobalSign

Email authentication weak

SPF

v=spf1 +mx +a +ip4:185.220.62.187 ~all

softfail (~all)

DMARC

not published

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ahWFe093jmqnxuAkXbVDjpcFFzdnclxx6KdKEhaOA+uTh65+fMp2bSJRpfUODEDtoZue4tfFlBcWL…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-10-17 to 2026-11-13

Expires in 161 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.chesterfieldroyal.nhs.uk/

present

strict-transport-security
content-security-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self' https://*.nhs.uk; frame-src 'self' https://heyzine.com/ https://chesterfieldroyalhospitalnhsft.beaconforms.com https://www.youtube-nocookie.com https://*.webspellchecker.net https://*.nhs.uk https://*.facebook.com https://*.youtube.com https://*.vimeo.com https://*.google.com https://*.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.beaconproducts.co.uk/js-sdk/production/beaconcrm.min.js https://cdnjs.cloudflare.com https://*.google-analytics.com https://*.googletagmanager.com https://connect.facebook.net https://feeds.trac.jobs https://*.webspellchecker.net https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.cqc.org.uk; font-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://*.webspellchecker.net; style-src 'self' 'unsafe-inline' data: https://cdnjs.cloudflare.com https://feeds.trac.jobs https://*.googleapis.com https://*.gstatic.com https://*.cqc.org.uk https://*.webspel
strict-transport-security: max-age=31536000

Links to (7)

Linked from (1)

joinedupcareers.co.uk×1