suicidepreventionwestyorkshire.co.uk

.uk crawl

First seen 2026-04-19 · Last seen 2026-05-16 · ok HTTP/1.1 200 5965 ms crawled 2026-05-13

GB · 185.220.61.205 · AS61323 Ans Academy Limited

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Suicide Prevention Resources for West Yorkshire
Description: This is an information portal for anyone in West Yorkshire with suicidal thoughts and in crisis, those bereaved by suicide or seeking suicide prevention training.
Language: en
Generator: concrete5
Canonical: https://suicidepreventionwestyorkshire.co.uk/

Technology

Server: Apache
CMS: Joomla

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (6)

cdnjs.cloudflare.com×2
fonts.gstatic.com×2
www.googletagmanager.com×2
fonts.googleapis.com×1
s7.addthis.com×1
translate.google.com×1

Registration

Registrar

ANS Group Ltd

Created

2021-06-16

Expires

2027-06-16 391 days left

Updated

2025-05-28

Name servers

ns0.ukfast.net.
ns1.ukfast.net.

DNS records live

NS

ns0.ukfast.net
ns1.ukfast.net

MX

0 ded2345.frank-hosting.co.uk

TXT

v=spf1 a a:ded2345.frank-hosting.co.uk ip4:185.220.61.205 185.217.42.79 ?all

Email authentication weak

SPF: v=spf1 a a:ded2345.frank-hosting.co.uk ip4:185.220.61.205 185.217.42.79 ?all
neutral (?all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-07-10 to 2026-07-16

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://suicidepreventionwestyorkshire.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: sameorigin, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; frame-src 'self' *.gov.uk/ *.soundcloud.com/ https://s7.addthis.com/ *.nhs.uk/ *.facebook.com/ *.youtube.com/ *.vimeo.com/ *.google.com/ *.googleapis.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com/ https://*.googletagmanager.com https://*.googletagmanager.com https://m.addthis.com/ https://v1.addthisedge.com/ https://z.moatads.com/ https://s7.addthis.com/ https://www.googletagmanager.com https://cdnjs.cloudflare.com/ https://www.google-analytics.com/ https://connect.facebook.net/ https://feeds.trac.jobs/ *.google.com *.googleapis.com *.gstatic.com *.cqc.org.uk ; font-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ https://feeds.trac.jobs/ *.googleapis.com *.gstatic.com *.cqc.org.uk; img-src * data:; object-src 'self' blob:; connect-src 'self' wss://ws.hotjar.com/ *.hotjar.io/ https://content.hotjar.io/ wss://wsp14.hotjar.com/api/v2/client/ws
strict-transport-security: max-age=31536000; includeSubDomains; preload, max-age=31536000