hellorayo.co.uk

.uk crawl

First seen 2026-04-12 · Last seen 2026-05-16 · ok HTTP/1.1 200 3812 ms crawled 2026-05-04

IE · 52.209.127.36 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Rayo | The Home of Your Favourite Radio, Music & Podcasts
Description: Say hello to Rayo! Discover your favourite radio stations and podcasts all in one place.
Language: en

Open Graph

url: https://hellorayo.co.uk/
title: Rayo | The Home of Your Favourite Radio, Music & Podcasts
site name: Rayo
description: Say hello to Rayo! Discover your favourite radio stations and podcasts all in one place.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (2)

media.bauerradio.com×68
www.googletagmanager.com×2

Social

Contact

Phone

918 5617 01

Registration

Registrar

Key-Systems GmbH

Created

2022-08-31

Expires

2026-08-31 104 days left

Updated

2025-08-18

Name servers

ns-1298.awsdns-34.org.
ns-1552.awsdns-02.co.uk.
ns-353.awsdns-44.com.
ns-964.awsdns-56.net.

DNS records live

NS

ns-1298.awsdns-34.org
ns-1552.awsdns-02.co.uk
ns-353.awsdns-44.com
ns-964.awsdns-56.net

MX

10 hellorayo-co-uk.mail.protection.outlook.com

TXT

Show 6 TXT records

_6vrw7wf79lpdphe326nbevuyu6lo88y
_zfxo4mphbaudh41bnrrxboyq9qmv8y7
facebook-domain-verification=u39sgaxhx5w13jaxzvz10ovn9g0ita
google-site-verification=PxEZbgm42Xgmbw1NsE0Enah_X3lyp9yfXH26AODkBrQ
v=spf1 include:_u.hellorayo.co.uk._spf.smart.ondmarc.com ~all
MS=ms24741465

Certificate (current)

Amazon RSA 2048 M01

from 2026-03-22 to 2026-10-06

Expires in 140 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www2.hellorayo.co.uk/?contentId=TTDGen_14432857437378164949&contentType=Audio&genre=Business&language=en&title=Royals%20-%20Lorde

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss:; worker-src 'self' blob:; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security: max-age=600; includeSubDomains; preload