portsmouthhospitalscharity.co.uk
HTML metadata
Technology
- Server
- Apache
- CMS
- Joomla
Third-party hosts loaded (3)
- www.porthosp.nhs.uk×9
- cdnjs.cloudflare.com×2
- translate.google.com×1
Social
DNS records live
- NS
-
- ns0.ukfast.net
- ns1.ukfast.net
- MX
-
- 0 vpchost7.frankdev.co.uk
Email authentication partial
- SPF
-
v=spf1 include:_spf.createsend.com +mx +a +ip4:45.145.100.93 ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LehkIxc9V2EzMs3fEZf2abb+djWENVVlHTlW3/XIUaqNkQn7rEvoQmva7XZ1dAb5oY3Paul3r94K6…
selectors probed - default:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 119 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- content-security-policy
default-src 'self' https://*.nhs.uk; frame-src 'self' https://gssapps.ebscohost.com/ https://forms.office.com/ https://www.youtube-nocookie.com https://*.webspellchecker.net https://*.nhs.uk https://*.facebook.com https://*.youtube.com https://*.vimeo.com https://*.google.com https://*.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.mailerlite.com/ https://cdnjs.cloudflare.com https://*.google-analytics.com https://*.googletagmanager.com https://connect.facebook.net https://feeds.trac.jobs https://*.webspellchecker.net https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.cqc.org.uk; font-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://*.webspellchecker.net; style-src 'self' 'unsafe-inline' data: https://cdnjs.cloudflare.com https://feeds.trac.jobs https://*.googleapis.com https://*.gstatic.com https://*.cqc.org.uk https://*.webspellchecker.net; img-src * data:; object-src 'self' blob: http- strict-transport-security
max-age=31536000
Links to (7)
Linked from (1)
Use this data via API
Everything on this page for portsmouthhospitalscharity.co.uk is available as JSON from the indexo.dev REST & MCP API.
curl "https://indexo.dev/api/v1/domains/portsmouthhospitalscharity.co.uk" \ -H "X-API-Key: idx_..."