hra.nhs.uk

.uk crawl

First seen 2026-04-15 · Last seen 2026-05-13 · ok HTTP/1.1 200 3179 ms crawled 2026-05-09

GB · 52.56.126.239 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Health Research Authority
Language: en-GB

Open Graph

url: /
title: Homepage
site name: Health Research Authority

Technology

CDN: Amazon CloudFront
CMS: Joomla

Analytics

Google Tag Manager

Third-party hosts loaded (5)

www.googletagmanager.com×2
cdn.jsdelivr.net×1
cdn01.basis.net×1
content.govdelivery.com×1
www.facebook.com×1

Social

DNS records live

NS

ns1.nhs.uk
ns2.nhs.uk
ns3.nhs.uk
ns4.nhs.uk

MX

10 hra-nhs-uk.mail.protection.outlook.com

TXT

Show 4 TXT records

google-site-verification=jDJukcXT_XrnBWtRFefqysPiL349sW10sWCPs2RQPY4
d3nxwowjs3haor.cloudfront.net
_gkb37f01g98qq69ka8lozmlzi2fuezn
apple-domain-verification=0Pp7SUBf93W3cjGT

Email authentication strong

SPF

v=spf1 ip4:212.250.23.71 ip4:212.250.43.7 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:dmarc-rua@dmarc.service.gov.uk

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz84Ptz6rdPFxjlYh96KvSxYbcqQC65zn0LYlC/TqgkshNz8puyfhcJKos4WL0uHFjxe1zYM99OrI9I…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8oD2wX6aCGkTtfDSLhaiZe4wY39ORfwVBe9XmDvrUgeMCUQdASc5V8FXoTRpJEbKzXJ6Ey13EZrVi…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-12-18 to 2026-12-23

Expires in 218 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.hra.nhs.uk/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy

findings

missing Content Security Policy
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; preload
cross-origin-opener-policy: same-origin