barclays.co.uk

.uk toplist crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1464 ms crawled 2026-05-18

DE · 104.102.56.42 · AS16625 Akamai Technologies, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Personal banking | Barclays
Description: From current accounts, mortgages and insurance, to loans, credit cards and saving accounts – see how we can help you. Let’s go forward.
Language: en
Canonical: https://www.barclays.co.uk/

Open Graph

url: https://www.barclays.co.uk/
title: Personal banking | Barclays
description: From current accounts, mortgages and insurance, to loans, credit cards and saving accounts – see how we can help you. Let’s go forward.

Technology

Third-party hosts loaded (1)

rum.hlx.page×1

Social

Registration

Registrar

CSC Corporate Domains, Inc

Created

1995-01-04

Expires

2027-01-04 228 days left

Updated

2025-12-31

Name servers

a1-71.akam.net.
a10-66.akam.net.
a11-67.akam.net.
a12-64.akam.net.
a18-65.akam.net.
a9-66.akam.net.
ns2.barcap.com.
ns3.barcap.com.
ns7.barcap.com.

DNS records live

NS

a1-71.akam.net
a10-66.akam.net
a11-67.akam.net
a12-64.akam.net
a18-65.akam.net
a9-66.akam.net
ns2.barcap.com
ns3.barcap.com
ns7.barcap.com

MX

10 mxa-00146204.gslb.pphosted.com
10 mxb-00146204.gslb.pphosted.com

TXT

Show 7 TXT records

t1tv8ntyp8x65jy9cp6b1bdf4x0k5kbg
QuoVadis=9b469c60-3f76-4ab9-bdbd-2e2cc006da07
dsr1vxsbypy1xn907nqsnrkjlbfzcvy0
gospaceai-site-verification=cbfd3c717743b8d581538f0b9ba0d12d76b6f073dee1c72a4377132d600c701b
wp-noop://
282s63byvfb56xb36dfw3b41m23s4zmq
7dq7cq9chhpnh92pccx038zk36m2j837

Verified for

Adobe
Meta
Microsoft 365

Email authentication strong

SPF: v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

DigiCert EV RSA CA G2

from 2026-04-20 to 2026-11-05

Expires in 168 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.barclays.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'none'; base-uri 'self'; frame-ancestors 'self' https://*.barclays.co.uk https://*.uk.barclays; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://tags.tiqcdn.com https://collect.tealiumiq.com https://gateway.answerscloud.com https://s.go-mpulse.net https://www.media.barclays.co.uk https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://api.travelex.net https://resources.barclays.co.uk https://barclaysbankplc.tt.omtrdc.net https://barclaysbankplc.demdex.net https://cm.everesttech.net https://dpm.demdex.net https://*.siteintercept.qualtrics.com https://btttag.com https://*.btttag.com https://cdn.decibelinsight.net https://collection.decibelinsight.net https://widget.decibelinsight.net https://portal.decibel.com https://v6-eu.api.decibel.com https://api.decibel.com https://d063-248-eu-frankfurt-1.api.decibel.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com
strict-transport-security: max-age=63072000