worcester-bosch.co.uk

.uk crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1613 ms crawled 2026-05-18

GB · 13.41.112.246 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: New Boilers | Worcester Bosch
Description: Put the UK’s most awarded boiler brand at the heart of your home and enjoy comfort the whole family can warm to.
Language: en
Canonical: https://www.worcester-bosch.co.uk/

Open Graph

url: https://www.worcester-bosch.co.uk
title: New Boilers | Worcester Bosch

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager
Hotjar

Ads

Meta Pixel

Social widgets

Twitter Widget

Third-party hosts loaded (15)

cdn.bc0a.com×2
dock.ui.bosch.tech×2
platform.twitter.com×2
www.googletagmanager.com×2
analytics.twitter.com×1
bosch11113.pcapredict.com×1
connect.facebook.net×1
dc.ads.linkedin.com×1
dev.visualwebsiteoptimizer.com×1
snap.licdn.com×1
static.hotjar.com×1
t.co×1
widget.trustpilot.com×1
worcesterbosch.resultspage.com×1
www.facebook.com×1

Social

Contact

Phone

0330 123 9559

Registration

Registrar

CSC Corporate Domains, Inc

Created

1999-12-21

Expires

2026-12-21 214 days left

Updated

2025-12-17

Name servers

gwa.fe.bosch.de.
gwa2.fe.bosch.de.

DNS records live

NS

gwa.fe.bosch.de
gwa2.fe.bosch.de

Verified for

Meta

Email authentication no MX

SPF: not published
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M01

from 2025-10-01 to 2026-10-31

Expires in 163 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.worcester-bosch.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'unsafe-inline' 'unsafe-eval' 'self' app.vwo.com a.omappapi.com widget.trustpilot.com platform.twitter.com static.ads-twitter.com connect.facebook.net snap.licdn.com dock.ui.bosch.tech bosch11113.pcapredict.com ict.infinity-tracking.net visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com www.google.com www.google-analytics.com www.googletagmanager.com www.gstatic.com googleads.g.doubleclick.net worcesterbosch.resultspage.com cdnjs.cloudflare.com cdn.ckeditor.com maps.googleapis.com static.hotjar.com script.hotjar.com js-agent.newrelic.com secure.agilecompanyintelligence.com cdn.bc0a.com static.elfsight.com script.infinity-tracking.com endpoint.chatbot-suite.bosch.tech universe-static.elfsightcdn.com https://www.worcester-bosch.co.uk;worker-src 'self' blob:;child-src 'self' blob: https://widget.trustpilot.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://checkoutshopper-live.adyen.com https://checkoutshopper-test.adyen.com www
strict-transport-security: max-age=31536000