data.gov.uk

.uk toplist crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 2047 ms crawled 2026-05-18

US · 151.101.192.144 · AS54113 Fastly, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: data.gov.uk - The home of UK public data
Description: The home of UK public data to inform decisions and build services
Language: en

Technology

CDN: Fastly

Registration

Registrar

Jisc Services Limited

Created

2013-09-09

Expires

2028-06-29 772 days left

Updated

2025-05-16

Name servers

ns-cloud-b1.googledomains.com
ns-1526.awsdns-62.org
ns-cloud-b2.googledomains.com
ns-cloud-b3.googledomains.com
ns-cloud-b4.googledomains.com
ns-488.awsdns-61.com
ns-842.awsdns-41.net
ns-1795.awsdns-32.co.uk

DNS records live

NS

ns-1526.awsdns-62.org
ns-1795.awsdns-32.co.uk
ns-488.awsdns-61.com
ns-842.awsdns-41.net
ns-cloud-b1.googledomains.com
ns-cloud-b2.googledomains.com
ns-cloud-b3.googledomains.com
ns-cloud-b4.googledomains.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

vggw3w6lmlzmr02xxkvjs7r3tvz1pdtz
google-site-verification=sIKL0X5gTWGapDhynm-7FBGkdSRCTRzfBJoVRvAgAd0

Email authentication weak

SPF: v=spf1 include:_spf.google.com include:spf.messagelabs.com ip4:46.43.41.10 ip4:46.43.41.11 ip4:46.43.41.20 ip4:46.43.41.21 ip4:46.43.41.22 ip4:46.43.41.25 -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-11-26 to 2026-12-28

Expires in 223 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.data.gov.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: default-src 'none'; connect-src 'self' *.google-analytics.com *.googletagmanager.com *.analytics.google.com; font-src 'self' data:; img-src 'self' *.google-analytics.com *.googletagmanager.com; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'unsafe-inline' 'self' *.google-analytics.com *.googletagmanager.com; style-src 'unsafe-inline' 'self'
strict-transport-security: max-age=631138519