bat.com

HTML metadata

Title: British American Tobacco - Home
Description: The home of BAT, a leading multi-category consumer goods company that provides tobacco and nicotine products to millions of consumers around the world.
Language: en
Canonical: https://www.bat.com/

Open Graph

url: https://www.bat.com/
title: British American Tobacco - Home
description: The home of BAT, a leading multi-category consumer goods company that provides tobacco and nicotine products to millions of consumers around the world.

Technology

CDN: Amazon CloudFront
Server: AmazonS3

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (4)

cdn.cookielaw.org×1
rum.hlx.page×1
webtrack.quantifire.co.uk×1
www.googletagmanager.com×1

Social

Contact

Phone

20 7845 1000

Registration

Registrar

Nom-iq Ltd. dba COM LAUDE

Created

1995-03-14

Expires

2027-03-15 298 days left

Updated

2026-02-28

Name servers

dns1.comlaude-dns.com
dns2.comlaude-dns.net
dns3.comlaude-dns.co.uk
dns4.comlaude-dns.eu

DNS records live

NS

dns1.comlaude-dns.com
dns2.comlaude-dns.net
dns3.comlaude-dns.co.uk
dns4.comlaude-dns.eu

MX

0 bat-com.mail.protection.outlook.com

TXT

Show 20 TXT records

K/mnu38l6JdPqy70VlTNuzoZECtrhtwZYffJwfNVH/NyVHp1fzUo03Bgnwmj2/EYxLGAW1glknbF1ZmwnEBs1A==
_6p0p97p93jwcqxkwduz6pyidlll9w5m
sending_domain1063232=f4fa0795f8106f423564d3a120574c55fd02dbe927a1ab7869bd445fd6544026
amazonses:YcZkiKB4CYR0K+zTKJnzVYe1EvrLJ0VPpqVGH07M1uI=
flexera-domain-verification-mjvbfvgoatjhqvkv
p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MSR1RRej6xAWY4lli5qcU37bUG4ToxXtKJ8n7lmdyT1jOQOOkZ8vJqWzNpYX5Y6EUrJ2gD9HBUrfHpMedbctP9toInkO8KZ9/gUSFy5hQP0+K4nbfACQMaoScMeCgsSJ9UNxK+esfvDGOe+6W2E9MY0JYn6HBHGh5K2Mp3LaCM3vS203N8Oz0wB9oGDcql5tCWll+DElQfZwW/VWVg4eBnVximn2pZ8DME90BaA28vPkBNO/g4yvIjVvqZ3ur7OFC2U6InTtAsg/lypLIYiUZYZOJGY93kulzKXZutjl1S9HVsuAecwVZ5pFmPVjr7Hgo3H9irW7gKcHS0C8VULYwIDAQAB
l57l43tbhplpcnhxb0bks4pgd2dlxf8q
zXQEWdfT9i56m+eSjQEpUUh+WGW/hygvDdKBWHiXiaMPRVha2Fp7Ck1wDcvnqF+Mf8LyRKCD8qCauCtehayIUw==
MS=8E52B876A630CA530C1F374924B8B6A6854A14AE
6tlrdkt2fxdjp1scr2gztjzx1bdr7zsx
16927b767786f740d841f9740ee029a8
docusign =cdb6f899-c3aa-4de2-b734-6a788d88b584
_bsxlc1wgq8hcz1yrj5lvlogqopigv8o
qmwy+kewPF4aGj423Rsh4m8N/RVF1uFCRqMEfoFPW9a/dW5Q7jKijslXZO6aScbz8/tRMk+bdS5+rL3kr9cVVA==
dell-technologies-domain-verification=bat.com_0fea7e71-1919-4ea9-afca-26523b84b703_1732155594
SFMC-lyamcKpm-f67kTLWOA90LfFhJpdsBCzeNgA_cZ6J
_gtgyzvbt1f1qw2ayqjogltdtua73ozy
pardot1063232=656d7ade867f1f81dd103a64d05757d8da1f6bddb409853fc86418d75fa0e1d9
ms6pws7qqbhjflbhlpxxj53856t52dwk
Ic6WqTc27FqgPacDyyRJgh8B9watyR616rcZWo4JSm75LEDsrBZLGdm+ZeK01vfSwUs1878mwzpJyl0WCQcCYw==

Verified for

Adobe
Apple
Atlassian
DocuSign
Google
Microsoft 365
Miro
OneTrust
Shopify

Email authentication strong

SPF

v=spf1 ip4:20.93.80.129 include:spf.protection.outlook.com include:spf.afas.online include:_spf.innovatelecom.es include:mail.zendesk.com include:_spf-dc12.successfactors.com include:_spf.salesforce.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=60; rua=mailto:m9hpwr8l@ag.eu.dmarcadvisor.com;

policy: quarantine · pct=60

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4H5lrxf7yv2fLT1R7yeFEuYhbvUDZFyB2LEvSuRgBWbf8DfxB6Nz2rVtN2oJAMIwjzIiurRv9MfSvyRVjFy…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub2DJJeWG09QtwQcP2d3Ayi14Cyc0Y19rOmQ3/c0q3PL1Bu/bxTycDgA6gxqwYCMv8vPUhZcXqUR5pXed9…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdXOTZjZgANvfeZUM3FZtk6GaJi/IPiI34INk8PhIuvFr3Yzn5By5dzDkHM6/NDKhSZmBYBfd8MazKjqwt…

selectors probed

Certificate (current)

Thawte TLS RSA CA G1

from 2025-09-03 to 2026-10-01

Expires in 133 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.bat.com/

present

strict-transport-security
x-frame-options

findings

missing Content Security Policy
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload