indexo.dev

hiowhealthcare.nhs.uk

.uk crawl

First seen 2026-05-01 · Last seen 2026-05-19 · ok HTTP/1.1 200 913 ms crawled 2026-05-08

GB · 45.157.41.193 · AS61323 Ans Academy Limited

Reputation 100/100

Classifying

HTML metadata

Title
Hampshire and Isle of Wight Healthcare NHS Foundation Trust
Description
Hampshire and Isle of Wight Healthcare NHS Foundation Trust provides a wide range of community, mental health and learning disability services for people across Hampshire and the Isle of Wight. We serve a population of around 1.5 million people, providing care for every stage of their lives. Our aim is to work alongside the people we support and our health and care partners, to provide outstanding care that helps people live their best and healthiest lives.
Language
en
Generator
Concrete CMS
Canonical
https://hiowhealthcare.nhs.uk/

Open Graph

url
https://hiowhealthcare.nhs.uk/
title
::
locale
en_GB
site name
Hampshire and Isle of Wight NHS Foundation Trust
description
Hampshire and Isle of Wight Healthcare NHS Foundation Trust provides a wide range of community, mental health and learning disability services for people across Hampshire and the Isle of Wight. We serve a population of around 1.5 million people, providing care for every stage of their lives. Our aim is to work alongside the people we support and our health and care partners, to provide outstanding care that helps people live their best and healthiest lives.

Technology

Server
Apache
CMS
Drupal

Third-party hosts loaded (2)

  • translate.google.com×1
  • www.cqc.org.uk×1

Social

Contact

Phone

DNS records live

NS
  • ns1.nhs.uk
  • ns2.nhs.uk
  • ns3.nhs.uk
  • ns4.nhs.uk
MX
  • 10 hiowhealthcare-nhs-uk.mail.protection.outlook.com
Verified for
  • Microsoft 365

Email authentication strong

SPF
v=spf1 +ip4:185.162.225.23 +include:spf.mandrillapp.com +include:spf.protection.outlook.com +include:spf.odmad.quest-on-demand.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:utxJD9AnHzj@dmarc-rua.mailcheck.service.ncsc.gov.uk;
policy: reject (enforced)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtygtrr7oPZA3jhkBowmJkVGy/0pwmOX5ItQ8LiSRbOil3sQ+NqA6sv97xgpjAjiZE30YfqcNMq8Ank…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0naaYq1odTf/nhnxD29t2teaRsWson5T761n7HMX2f5pWS8OsJ8WfhxffTsQxqrnYYBRmw2oJElgjE…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2025-09-29 to 2026-10-01
Expires in 133 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://hiowhealthcare.nhs.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
  • weak content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN, SAMEORIGIN
x-content-type-options
nosniff, nosniff
content-security-policy
default-src 'self'; frame-ancestors 'self' https://*.nhs.uk; frame-src 'self' https://www.youtube-nocookie.com https://cdnjs.cloudflare.com https://www.careopinion.org.uk https://padlet.com https://www.eventbrite.com https://*.twitter.com https://*.nhs.uk https://*.youtube.com https://*.vimeo.com https://*.google.com https://*.googleapis.com https://challenges.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net/gh/fancyapps/fancybox@3.5.7/dist/jquery.fancybox.min.js https://cdnjs.cloudflare.com https://www.google-analytics.com https://*.googletagmanager.com https://*.twitter.com https://feeds.trac.jobs https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.cqc.org.uk; font-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/gh/fancyapps/fancybox@3.5.7/dist/jquery.fancybox.min.c
strict-transport-security
max-age=31536000; includeSubDomains; preload, max-age=31536000

Links to (9)

Linked from (1)