surrey.ac.uk

HTML metadata

Title: University of Surrey
Description: The University of Surrey, offers life-changing education and research on a beautiful campus in Guildford.
Language: en-GB
Generator: Drupal 11 (https://www.drupal.org)
Canonical: https://www.surrey.ac.uk/

Open Graph

url: https://www.surrey.ac.uk/
title: University of Surrey
site name: University of Surrey
description: The University of Surrey is a leading university located within the county town of Guildford, Surrey in the South East of England, UK.

Technology

CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (2)

cdn.unibuddy.co×1
www.googletagmanager.com×1

Social

Contact

Phone

1483 300800

DNS records live

NS

apextdns1.surrey.ac.uk
mpextdns1.surrey.ac.uk
ns3.ja.net

MX

0 surrey-ac-uk.mail.protection.outlook.com

TXT

Show 6 TXT records

7jl7vdr9zfsljdgl4xkr6525hj6zyv66
_a0odyxopyo9jga0rbkrdxl37bjz74c2
8WOK696I7ISNU7RBLVP3R6X98VIPE37C0PYRBEQLX
_3a4bc7ca8676a41579d3735fdc0a464a.pg-prospectus.surrey.ac.uk.CNAME_1a7c610daf35d0b8cd8439688418bd02.zfyfvmchrl.acm-validations.aws
msfpkey=38ca66p13k1fogeseu103o3q5
atlassian-sending-domain-verification=a35fbaa4-5a24-4df8-b9c3-0a6efc60d9c3

Verified for

Apple
Atlassian
Dynamics 365
GlobalSign
Google
OneTrust

Email authentication strong

SPF

v=spf1 include:_u.surrey.ac.uk._spf.smart.ondmarc.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:7870de00@inbox.ondmarc.com; ruf=mailto:7870de00@inbox.ondmarc.com; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600

policy: reject (enforced) · sp=reject

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwtD1GovYdufGpcNl85EX5OxV+ZqqfI0L+BROQiSrpGA5biuNT5hcovpqxLQ7Y/vJH/Lk09xjXl2tf…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKO9UywIRgr0H+pw9MQfdhKIos+jEOZqJbn874Lzu8ekyYIW47WLmc6LjnviE+QpprlSZ49g87vFMd…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-09-30 to 2026-09-30

Expires in 132 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.surrey.ac.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.plyr.io cdnjs.cloudflare.com *.discoveruni.gov.uk discoveruni.gov.uk www.googleoptimize.com www.googletagmanager.com www.google-analytics.com *.blackbaudhosting.com cdn.jsdelivr.net i.vimeocdn.com *.unibuddy.co cdn.matomo.cloud snap.licdn.com acdn.adnxs.com static.ads-twitter.com *.quantserve.com *.hotjar.com www.google.com www.google.co.uk www.googleadservices.com *.google.com gtm *.gstatic.com wss://*.hotjar.com in.hotjar.com *.hotjar.io *.facebook.com *.twitter.com *.ads-twitter.com t.co *.ads.linkedin.com *.g.doubleclick.net snap.licdn.com *.youtube-nocookie.com www.youtube.com payments.blackbaud.com *.quantcount.com *.doubleclick.net player.vimeo.com developers.panopto.com www.instagram.com connect.facebook.net optimize.google.com surrey.matomo.cloud js-agent.newrelic.com googletagmanager.com bam.nr-data.net dev.visualwebsiteoptimizer.com visualwebsiteoptimizer.com *.visualwebsiteoptimizer.com app.vwo.co
strict-transport-security: max-age=31557600