nationalarchives.gov.uk

HTML metadata

Title: Home - The National Archives
Description: Explore 1,000 years of history
Language: en
Canonical: https://www.nationalarchives.gov.uk/

Open Graph

url: https://www.nationalarchives.gov.uk/
logo: /static/assets/images/icon-1024x1024.png
title: The National Archives
locale: en_GB
site name: The National Archives
description: Explore 1,000 years of history

Technology

CDN: Amazon CloudFront
Server: nginx
CMS: Gatsby

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×2
use.typekit.net×2
fonts.gstatic.com×1

Social

Contact

Address: Bessant Drive, TW9 4DU, Kew, Richmond, London, UK

Registration

Registrar

Verizon UK Limited

Created

2002-12-12

Expires

2026-12-12 204 days left

Updated

2025-11-04

Name servers

ns-859.awsdns-43.net
ns-193.awsdns-24.com
ns-1869.awsdns-41.co.uk
ns-1370.awsdns-43.org

DNS records live

NS

ns-1370.awsdns-43.org
ns-1869.awsdns-41.co.uk
ns-193.awsdns-24.com
ns-859.awsdns-43.net

MX

0 nationalarchives-gov-uk.mail.protection.outlook.com

TXT

Show 10 TXT records

eiq728gltupdvicj4bpr528pvf
846jem2oirp3mngnueg5cv0m1s
EbGfXflNGhMh7JzrFOb7h7MTvLiVaRIxYYGnKCPSh2IxW6TQImNWabOkMc2fy6MqcTeCpOt+aW7ImcKlAOZgSA==
citrix.mobile.ads.otp=zc90r1sevn933lx8md2h
msfpkey=5d7d2qnmxcyx7zxojedu9nv5j
846jem2oirp3mngnueg5cv0m1s.
citrix.mobile.ads.otp=va0hf6mjsfcsyeq0xsi5d
auvufc5kkpbmio2cjbre0c5b5s
DbUsQo5WRLre2nHvaSRgFtqTkgPZDZY7rIPVW4a9vTo1E+QkQfJpadWWSwUS6NidNqeeI7aQ3t/LnwULxpmQkg==
msfpkey=7carxvs9m8398sxexojer8bh5

Verified for

Atlassian
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a ip4:89.197.114.128/25 ip4:72.55.140.81 ip4:72.32.24.120 ip4:34.102.239.211 include:amazonses.com include:spf.protection.outlook.com include:mailgun.org include:shops.shopify.com include:spf-ps.e-shot.org include:mail.koha-ptfs.co.uk -all

strict (-all)

DMARC

v=DMARC1;p=reject;sp=reject;fo=1;rua=mailto:dmarc-rua@dmarc.service.gov.uk;ruf=mailto:dmarc-ruf@dmarc.service.gov.uk

policy: reject (enforced) · sp=reject

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGC79W3BRoHDbSX0X1sPZ9bV3mPpoOhdjwyZbLpHpwPBHU4izMrypQfef5T/t+7p5bCQEhbyJgwYZa…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyqsxcl1ojNw3tuvXdfTZ6fonUEven2O8hbYGkOHW6YT+pXar5w/FVj8xICbXF+xIOFvpkdYjzUmzd…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-11-03 to 2026-12-03

Expires in 195 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.nationalarchives.gov.uk/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin, no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: default-src 'self'; object-src 'none'; frame-ancestors 'self' https://wagtail.nationalarchives.gov.uk; child-src 'none'; connect-src 'self' https://*.google-analytics.com https://*.sentry.io https://noembed.com; font-src 'self' https://fonts.gstatic.com https://use.typekit.net *.gstatic.com; frame-src 'self' https://www.youtube-nocookie.com www.google.com www.youtube.com; img-src 'self' https://*.nationalarchives.gov.uk https://i.ytimg.com https://img.youtube.com https://www.googletagmanager.com img.youtube.com; media-src 'self' https://*.nationalarchives.gov.uk; script-src 'self' https://www.googletagmanager.com https://*.sentry-cdn.com https://www.youtube.com ajax.googleapis.com *.googleanalytics.com *.google-analytics.com www.youtube.com; style-src 'self' https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net ajax.googleapis.com fonts.googleapis.com *.gstatic.com; worker-src 'self' blob: www.nationalarchives.gov.uk;
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: same-origin