nhscsampleservice.co.uk

HTML metadata

Technology

Server

Microsoft-IIS

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (4)

• www.googletagmanager.com×2
• cdn.jsdelivr.net×1
• fonts.googleapis.com×1
• www.google.com×1

DNS records live

NS

• amsdns1.nestle.com
• aoadns1.nestle.com
• ctrdns1.nestle.com
• eurdns1.nestle.com

MX

• 10 uk.mx1.mailanyone.net
• 20 uk.mx2.mx25.net
• 30 uk.mx3.mailanyone.net
• 40 uk.mx4.mx25.net

TXT

• vpe=99012cf7

Verified for

• Google

Email authentication strong

SPF

v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email

policy: reject (enforced)

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://nhscsampleservice.co.uk/Account/Login?ReturnUrl=%2f

present

• x-frame-options

findings

• missing HSTS
• missing Content Security Policy
• weak frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (2)

• nestle.co.uk×1
• nestlehealthscience.co.uk×1

Linked from (1)

• nplushub.co.uk×1