indexo.dev

yaledws.co.uk

.uk crawl

First seen 2026-05-16 · Last seen 2026-05-20 · ok HTTP/1.1 200 6230 ms crawled 2026-05-20

IE · 52.16.8.119 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
English | Yale
Language
en
Canonical
https://www.yaledws.co.uk/uk/en
Translations
  • en

Open Graph

url
https://www.yaledws.co.uk/uk/en
title
English

Technology

Third-party hosts loaded (2)

  • gw-assets.assaabloy.com×6
  • www.yalehome.com×1

DNS records live

NS
  • dns1.cscdns.net
  • dns2.cscdns.net
MX
  • 0 yaledws-co-uk.mail.protection.outlook.com
TXT
  • Xrsgkyt2Sp//RR10RQ65DqjCQ/bRBluTG7Ci/XxHiLFGK9CzSvx7eUEMrzHg+ZarPYUin2o78BhfQCuhK7H4xw==

Email authentication strong

SPF
v=spf1 ip4:141.81.167.228 include:spf.protection.outlook.com ip4:35.214.212.238 ip4:35.214.183.81 ip4:35.214.208.81 ip4:35.214.213.218 -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:c617a603d59c866@rep.dmarcanalyzer.com; ruf=mailto:c617a603d59c866@for.dmarcanalyzer.com; pct=100; fo=1
policy: reject (enforced)
DKIM
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw6AuErWLnhyUNvAQY6GPlT35epFvrW2ARMBL40IhWSZzI8U+KIZtGM2Wup1R8vvrPV8BVGUlEgf+K…
selectors probed

Certificate (current)

R12
from 2026-03-30 to 2026-06-28
Expires in 39 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.yaledws.co.uk/uk/en

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • weak frame protection
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN, SAMEORIGIN
permissions-policy
geolocation=(), midi=(), sync-xhr=(*), microphone=(), camera=(), magnetometer=(self), gyroscope=(self), accelerometer=(self), fullscreen=(self "https://www.youtube-nocookie.com"), payment=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; connect-src https: wss:; font-src 'self' https://fonts.gstatic.com; frame-src https:; img-src https: data:; media-src https: blob:; worker-src blob:; object-src 'none'; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; form-action https:; report-uri https://csp-reports.globalweb.aws.assaabloy.com/reports;
strict-transport-security
max-age=31557600

Linked from (1)