healthlottery.co.uk

.uk crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 6317 ms crawled 2026-05-19

US · 18.165.122.23 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Play Our Lottery Online Games For Just £1 - The Health Lottery
Description: The Health Lottery has fun and exciting instant win and lottery online games from just £1, and the best part? You're helping others every time you play!
Language: en
Canonical: https://www.healthlottery.co.uk/

Open Graph

url: https://www.healthlottery.co.uk/
title: Play Our Lottery Online Games For Just £1 - The Health Lottery
description: The Health Lottery has fun and exciting instant win and lottery online games from just £1, and the best part? You're helping others every time you play!

Technology

CDN: Amazon CloudFront

Analytics

Google Tag Manager

Third-party hosts loaded (7)

applepay.cdn-apple.com×1
cdnjs.cloudflare.com×1
code.jquery.com×1
media.thl.gpp.io×1
pay.google.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Tucows Inc t/a Tucows

Created

2007-05-31

Expires

2026-05-31 10 days left

Updated

2025-05-02

Name servers

ns-1173.awsdns-18.org.
ns-1555.awsdns-02.co.uk.
ns-510.awsdns-63.com.
ns-935.awsdns-52.net.

DNS records live

NS

ns-1173.awsdns-18.org
ns-1555.awsdns-02.co.uk
ns-510.awsdns-63.com
ns-935.awsdns-52.net

MX

10 inbound-smtp.eu-west-1.amazonaws.com

Verified for

Google

Email authentication strong

SPF: v=spf1 mx ip4:89.106.181.103 ip4:67.205.123.11 include:rnmk.com include:spf.logicalware.com include:amazonses.com include:_vccnets.8x8.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; rua=mailto:dmarc@healthlottery.co.uk; fo=1
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M02

from 2025-07-21 to 2026-08-20

Expires in 91 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.healthlottery.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; frame-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss: blob:; child-src https: blob:; worker-src 'self' blob:;
strict-transport-security: max-age=15552000; includeSubDomains