English

cf_clearance

__cf_bm

The domain name 'www.nhsbsa.nhs.uk' uses the United Kingdom country-code top-level domain (.nhs.uk), featuring subdomain 'www'. Count 6 characters in 'nhsbsa' holding 1 vowel versus five consonants. Segmentation suggests 2 words: nhs, bsa. Median word length is three characters. No strong language cues emerged from the frequency lists.

html/50/7b/507b2c46-9968-4952-af7e-13f664d45687_fallback.html.gz

Welcome | NHSBSA

aggregated_field

html/50/7b/507b2c46-9968-4952-af7e-13f664d45687.html.gz

inline; filename="headerBanner_corporate.webp"

inline; filename="footerBanner_corporate.webp"

682c2461685ccab9440db6922fcc1e08743ee9e15866549c190a7906fce8b7ee

83a3dad0e2b07d3ec4ece31d37fad1e8156060b2ff3003342395e3d5edb689bb

Access your NHS Learning Support Fund account

Buy a prescription prepayment certificate

Pay or challenge your penalty charge notice

Check if you're eligible for help with NHS charges

Adult Social Care Learning and Development Support Scheme

NHS and Social Care Coronavirus Life Assurance Scheme 2020

cookies page
(Opens in a new window)
Cookie Control Link Icon

The NHS Business Services Authority (NHSBSA) is a Special Health Authority and an Arm's Length Body of the Department of Health and Social Care (DHSC).

description

abstract

referrer

twitter:card

Generator

MobileOptimized

HandheldFriendly

viewport

msapplication-TileColor

/themes/custom/nhsbsa/favicons/mstile-144x144.png

msapplication-TileImage

/themes/custom/nhsbsa/favicons/browserconfig.xml

msapplication-config

theme-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

nhsbsa.nhs.uk

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
  new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
  j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
  'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
  })(window,document,'script','dataLayer','GTM-T9BGH7J');


        // Toggle class indicating that JS is enabled; used for styling purpose.
        document.documentElement.className = document.documentElement.className.replace(/\bno-js\b/,'') + ' js';
    


      // Read out cookies from client
      function readCookie(name) {
        var nameEQ = name + "=";
        var ca = document.cookie.split(';');
        for (var i = 0; i < ca.length; i++) {
          var c = ca[i];
          while (c.charAt(0) == ' ') c = c.substring(1, c.length);
          if (c.indexOf(nameEQ) == 0) return c.substring(nameEQ.length, c.length);
        }
        return null;
      }

      var cookieControlValue = readCookie('CookieControl');
      var cookieControlJson = JSON.parse(cookieControlValue);


      window.dataLayer = window.dataLayer || [];

      var cookieAnalytics = (cookieControlJson && cookieControlJson.optionalCookies && cookieControlJson.optionalCookies.analytics && cookieControlJson.optionalCookies.analytics === 'accepted') ? 'TRUE' : 'FALSE';
      var cookieMarketing = (cookieControlJson && cookieControlJson.optionalCookies && cookieControlJson.optionalCookies.marketing && cookieControlJson.optionalCookies.marketing === 'accepted') ? 'TRUE' : 'FALSE';

      window.dataLayer.push({
        'analyticsConsent': cookieAnalytics,
        'marketingConsent': cookieMarketing
      });

      var config = {
        apiKey: '7ae2775bc0129bd88661030848a2cf545d21fef2',
        product: 'PRO_MULTISITE',
        necessaryCookies: ['TEXT_SIZE', 'has_js'],
        text: {
          title: 'Cookies on our website',
          intro: 'We use cookies so that our website works properly. We’d also like to use cookies to collect information about how you use our website. This information helps us to improve our website and services.',
          necessaryTitle: 'Essential cookies',
          necessaryDescription: 'These cookies are essential for our website to function. Our website does not work properly without them.',
          acceptRecommended: 'Accept all cookies',
          accept: 'Accept all cookies',
          acceptSettings: 'Accept all cookies',
          reject: 'Only use essential cookies',
          rejectSettings: 'Only use essential cookies',
          closeLabel: 'Close'
        },
        statement : {
          description: 'For more information about the cookies we use, visit our',
          name : 'cookies page',
          url: 'https://www.nhsbsa.nhs.uk/our-policies/cookies',
          updated : '29/07/2020'
  },
        optionalCookies: [
            {
                name: 'analytics',
                label: 'Analytics cookies',
                description: 'We use Google Analytics to measure how you use the website so we can improve it based on user needs. This information is anonymous and does not directly identify you. ',
                recommendedState: true,
                cookies: ['_ga', '_gid', '_gat_UA-6646272-1'],
                onAccept: function() {
                   /*load analytics GTM-WKVTR8*/
                   addGTM('GTM-WKVTR8');
                },
                onRevoke: function() {
                    /*remove analytics GTM */
                    removeGTM('GTM-WKVTR8');
                }
            }
        ],
        position: 'LEFT',
        theme: 'DARK',
        branding: {
          fontColor: "#000",
          fontSizeTitle: "1.2em",
          fontSizeIntro: "1em",
          fontSizeHeaders: "1em",
          fontSize: "0.89em",
          backgroundColor: "#eff0f1",
          toggleText: "#fff",
          toggleColor: "#fff",
          toggleBackground: "#275389",
          buttonIcon: null,
          buttonIconWidth: "64px",
          buttonIconHeight: "64px",
          removeIcon: false,
          removeAbout: true
        },
        initialState: 'open',
        rejectButton: true,
        closeStyle: 'labelled'
      };

      CookieControl.load(config);
      function addGTM (id) {
        var theID = id;
        // add this code
        (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
        new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
        j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
        'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
        })(window,document,'script','dataLayer', theID);
        }

      function removeGTM (id) {
        var theID = id;
        // add this code
        var allScripts=document.getElementsByTagName("script");
          for (var i=allScripts.length; i>=0; i--){
            if (allScripts[i] && allScripts[i].getAttribute('src')!=null && allScripts[i].getAttribute('src').indexOf(theID)!=-1) {
              allScripts[i].parentNode.removeChild(allScripts[i])
            }
          }
      }
    

Google

✅ Low Risk - https://www.nhsbsa.nhs.uk/

Requests	IP Address	Location	AS Autonomous System
4	172.64.146.133	United States	AS13335CLOUDFLARENET
4	104.17.25.14	United States	AS13335CLOUDFLARENET
4	104.18.41.123	United States	AS13335CLOUDFLARENET
4	172.66.163.83	United States	AS13335CLOUDFLARENET
4	142.250.185.168	United States	AS15169GOOGLE
4	2606:4700:10::ac42:a353	United States	AS13335CLOUDFLARENET
4	104.20.44.120	United States	AS13335CLOUDFLARENET
4	2a00:1450:4001:80f::2008	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
4	2a06:98c1:3103::6812:297b	United States	AS13335CLOUDFLARENET
4	2606:4700:10::6814:2c78	United States	AS13335CLOUDFLARENET
64	15	-	-

Security Scan Report: www.nhsbsa.nhs.uk

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History