midlandsandlancashirecsu.nhs.uk

.uk crawl

First seen 2026-04-13 · Last seen 2026-05-07 · ok HTTP/1.1 200 1950 ms crawled 2026-05-07

GB · 45.145.102.52 · AS61323 Ans Academy Limited

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: NHS Midlands and Lancashire
Description: Explore our site to learn how we support NHS health systems to become more integrated and accountable to the populations they serve.
Language: en-GB
Canonical: https://www.midlandsandlancashirecsu.nhs.uk/

Open Graph

url: https://www.midlandsandlancashirecsu.nhs.uk/
title: NHS Midlands and Lancashire
locale: en_GB
site name: NHS Midlands and Lancashire
description: n collaboration with fellow system support providers and specialist partners, we can help improve patient services and outcomes while delivering value for money.

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (2)

pbs.twimg.com×3
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.nhs.uk
ns2.nhs.uk
ns3.nhs.uk
ns4.nhs.uk

MX

0 midlandsandlancashirecsu-nhs-uk.mail.protection.outlook.com

TXT

335C123BFD903593D03585798C31E2DCEBCB643B54736534239452BFF46A3264
59ce1920d94b4ee19713d67d4604a1bd
O5nFeXcXzI0GwuHxT+tf/Y42k6G8oUnWoiSiEhInvEo=

Verified for

GlobalSign
Microsoft 365

Email authentication partial

SPF: v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-06-10 to 2026-07-12

Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.midlandsandlancashirecsu.nhs.uk/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=(), fullscreen=(self)
x-content-type-options: nosniff
strict-transport-security: max-age=31536000, max-age=15768000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: same-site