wmas.nhs.uk

.uk crawl

First seen 2026-04-26 · Last seen 2026-05-19 · ok HTTP/1.1 200 431 ms crawled 2026-05-19

US · 141.193.213.21 · AS209242 Cloudflare London, LLC

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: West Midlands Ambulance Service University NHS Foundation Trust
Language: en-GB
Generator: Site Kit by Google 1.178.0
Canonical: https://www.wmas.nhs.uk/

Open Graph

url: https://www.wmas.nhs.uk/
title: West Midlands Ambulance Service University NHS Foundation Trust
locale: en_GB
site name: West Midlands Ambulance Service University NHS Foundation Trust

Technology

CDN: Cloudflare
CMS: WordPress 1.178.0 outdated (current 6.8)
jQuery: 3.7.1

Analytics

Google Tag Manager

Third-party hosts loaded (5)

cc.cdn.civiccomputing.com×2
www.google.com×2
www.googletagmanager.com×2
translate.google.com×1
www.cqc.org.uk×1

Social

DNS records live

NS

ns1.nhs.uk
ns2.nhs.uk
ns3.nhs.uk
ns4.nhs.uk

MX

10 wmas-nhs-uk.mail.protection.outlook.com

TXT

683og0a528g7htln7be22hf8ta
=gmEVJEuoEoMIMMOoJebt2scpd4AB3ZtAYbAVpP9Z744=
BpzGsrvIJ+M4xbcyIcj0sthOERLisWvhtgnXMPYU5bjey9bAHQZH9JDo4bNdV/hIvko9/RMP5MFf385vHhyu6g==

Verified for

Apple
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com ip4:150.70.224.0/20 ip4:77.68.82.217 ip4:185.143.212.0/22 include:b.atomicsites.net include:aace.org.uk include:_spf.nhs.net include:_spf.wpcloud.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:okvucztd@ag.eu.dmarcadvisor.com;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPFrpJI6Fr+krIUDJkim1xQ7diqVRLbm46b0SggZLBvMqJoVvzNEU9YDKxTm4qTVPJOXmab0JMSnef…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aMmBgoy3SLb7taHNPGRVJIZ2OIWBWO/4uc+9Sz5nP+upYNYIQim7aXnLgjYsw5DfrfA4PmfsEdDMS…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FrCsVQNkJb5v8Hfu6OsQCis3KU0LSvV5/XMvZBcBsp2NfyIS9/MSaEx2XQFqYeuoXMajcDH/VrKbj8rLV…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqz2KhPt5/jrjLTSTvG+/f6GpDzVtOcybgHX1/1D8PLzN2sfHkrh5BLC2RpdCJ0TtvXLNRWTR1vdw6pxBheDskQw…

selectors probed

Certificate (current)

from 2026-03-26 to 2026-06-24

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.wmas.nhs.uk/

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Links to (8)

Linked from (1)

aace.org.uk×2