sepa.org.uk

.uk crawl

First seen 2026-04-13 · Last seen 2026-05-16 · ok HTTP/1.1 200 890 ms crawled 2026-05-06

GB · 4.234.51.67 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title: Home | Scottish Environment Protection Agency (SEPA)
Description: The Scottish Environment Protection Agency (SEPA) are Scotland’s principal environmental regulator, protecting and improving Scotland’s environment.
Language: en

Technology

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

cdnjs.cloudflare.com×3
fonts.googleapis.com×2
fonts.gstatic.com×1
kit.fontawesome.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

British Telecommunications plc

Created

1995-11-28

Expires

2027-11-28 557 days left

Updated

2025-11-21

Name servers

ns1-07.azure-dns.com.
ns2-07.azure-dns.net.
ns3-07.azure-dns.org.
ns4-07.azure-dns.info.

DNS records live

NS

ns1-07.azure-dns.com
ns2-07.azure-dns.net
ns3-07.azure-dns.org
ns4-07.azure-dns.info

MX

10 sepa-org-uk.mail.protection.outlook.com

Email authentication strong

SPF

v=spf1 ip4:162.13.222.129/32 ip4:162.13.222.130/32 ip4:89.234.59.186/32 ip4:51.104.230.65/32 ip4:51.11.50.145/32 ip4:20.90.219.73 include:spf.responsesource.com include:htkhorizon.com include:spf.protection.outlook.com a:621042-web2.bis-web.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;rua=mailto:dmarc@sepa.org.uk,mailto:dmarc-rua@dmarc.service.gov.uk;ruf=mailto:dmarc@sepa.org.uk;ri=86400

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD9768Q30hxd+IsH2UprPD0hqy9pIZeDNxJ9NbK0S4wDzLTaZiQmTia4YgWhqkVYQNL4nL/PwjRHzqPt4OWr8…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XSwGIl1qJRF2iMwmB3oK8oUBKcPvS2VoI85vpCBNkxvZ1iwDM1Dw8JXuuR4RncgICm1MrEVF4Izma…

selectors probed

Certificate (current)

R12

from 2026-03-17 to 2026-06-15

Expires in 26 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.sepa.org.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SameOrigin
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self';script-src 'self' https://code.google.com https://www.googletagmanager.com https://www.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://kit.fontawesome.com/ed484c9edf.js https://cdn.jsdelivr.net/npm/ https://code.jquery.com https://cdnjs.cloudflare.com;object-src 'self';style-src 'self' 'unsafe-inline' https://code.google.com https://cdn.jsdelivr.net/npm/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://fonts.googleapis.com/css2 https://cdnjs.cloudflare.com https://consentcdn.cookiebot.com;img-src 'self' data: https://imgsct.cookiebot.com https://www.google-analytics.com https://www.googletagmanager.com;media-src 'self';frame-src 'self' https://consentcdn.cookiebot.com https://www.googletagmanager.com;font-src 'self' data: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://fonts.gstatic.com/s/poppins/ https://ka-p.fontawesome.com/releases/;connect-src 'self' https://www.google-analytics.com https://regi
strict-transport-security: max-age=2592000