dgt.nhs.uk

.uk crawl

First seen 2026-05-28 · Last seen 2026-05-31 · ok HTTP/1.1 200 751 ms crawled 2026-05-30

GB · 185.220.62.117 · AS61323 Ans Academy Limited

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Home :: Dartford and Gravesham NHS Trust
Description: Welcome to the Dartford and Gravesham NHS Trust website. We are one of the largest hospital trusts in North Kent, with services at three sites serving a local population of over 500,000 people. Our vision is to be an outstanding hospital Trust providing the best possible care for our patients that is safe, well-coordinated, in the right place and designed around the patient’s needs.
Language: en
Generator: concrete5 - 8.5.1
Canonical: https://www.dgt.nhs.uk/

Technology

Server: Apache
CMS: Drupal 8.5.1

Analytics

Google Tag Manager

Third-party hosts loaded (5)

www.googletagmanager.com×2
challenges.cloudflare.com×1
translate.google.com×1
www.browsealoud.com×1
www.cqc.org.uk×1

Social

Contact

Phone

01322428100

Address

Dartford and Gravesham NHS Trust,Darenth Wood Road,Dartford,Kent, DA2 8DA

DNS records

MX

50 mail.nhs.uk

TXT

QuoVadis=8b9cf29e-abc0-4ed3-905d-fcbb3296b09a

Verified for

Apple

Email authentication weak

SPF: v=spf1 a:mailrelay.kallidus-suite.com a:mail-relay.advorto.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-10-03 to 2026-10-07

Expires in 124 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.dgt.nhs.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; frame-src 'self' https://challenges.cloudflare.com/ *.twitter.com *.nhs.uk *.facebook.com *.youtube.com *.vimeo.com *.google.com *.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com/ https://cdn.datatables.net https://*.googletagmanager.com https://*.googletagmanager.com https://bam.eu01.nr-data.net/ https://js-agent.newrelic.com https://cdn.syndication.twimg.com https://platform.twitter.com https://cdnjs.cloudflare.com https://connect.facebook.net/ https://feeds.trac.jobs *.google.com *.googleapis.com *.gstatic.com *.cqc.org.uk https://plus.browsealoud.com https://www.browsealoud.com https://*.speechstream.net https://*.googletagmanager.com https://www.google-analytics.com https://apis.google.com https://wikisum.texthelp.com; font-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://fonts.gstatic.com; style-src 'self' https://cdn.datatables.net 'unsafe-inline' https://platform.twitter.com https://cdnjs
strict-transport-security: max-age=31536000