english-heritage.org.uk

.uk crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 3025 ms crawled 2026-05-19

SE · 217.114.94.2 · AS30811 Optimizely AB

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: English Heritage | English Heritage
Description: English Heritage cares for over 400 historic places, bringing the story of England to life for millions of visitors each year.
Canonical: https://www.english-heritage.org.uk/

Open Graph

url: https://www.english-heritage.org.uk/
title: English Heritage
site name: English Heritage
description: English Heritage cares for over 400 historic places, bringing the story of England to life for millions of visitors each year.

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (4)

cdn.checkout.ventrata.com×1
dl.episerver.net×1
translate.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Ionos SE

Created

1996-11-13

Expires

2026-11-13 176 days left

Updated

2025-11-12

Name servers

ns1-05.azure-dns.com.
ns2-05.azure-dns.net.
ns3-05.azure-dns.org.
ns4-05.azure-dns.info.

DNS records live

NS

ns1-05.azure-dns.com
ns2-05.azure-dns.net
ns3-05.azure-dns.org
ns4-05.azure-dns.info

MX

10 englishheritage-org-uk01i.mail.protection.outlook.com

Verified for

Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 mx include:spf.protection.outlook.com include:spf.amris.com ip4:194.62.32.0/24 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-rua@dmarc.service.gov.uk; ruf=mailto:itsecurity@english-heritage.org.uk; pct=100

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDXLDw6FkbKIVWZN5+XvA0EU0hedwTf8/0THWCJdwzyNRx4TuKx+AUZcXAxMy1kEPEF/uIUMgX4mSzXrKKocV…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-02-23 to 2027-03-27

Expires in 310 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.english-heritage.org.uk/

present

x-frame-options

findings

missing HSTS
missing Content Security Policy
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN