nationalhighways.co.uk

HTML metadata

Title: National Highways - National Highways
Description: Looking after England's motorways and major roads
Language: en
Canonical: https://nationalhighways.co.uk/

Open Graph

url: https://nationalhighways.co.uk/

Technology

Analytics

Google Tag Manager

Ads

Meta Pixel

Fonts

Adobe Fonts

Third-party hosts loaded (9)

websurveys2.govmetric.com×3
ajax.aspnetcdn.com×2
code.jquery.com×2
cc.cdn.civiccomputing.com×1
connect.facebook.net×1
hitcounter.govmetric.com×1
use.typekit.net×1
www.browsealoud.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

03001235000

Address

National Highways National Traffic Operations Centre 3 Ridgeway Quinton Business Park Birmingham B32 1AF

Registration

Registrar

123-Reg Limited t/a 123-reg

Created

2020-09-03

Expires

2026-09-03 105 days left

Updated

2025-08-26

Name servers

ns0.ukfast.net.
ns1.ukfast.net.

DNS records live

NS

ns0.ukfast.net
ns1.ukfast.net

MX

30 highwaysengland-co-uk.mail.protection.outlook.com

TXT

have-i-been-pwned-verification=dweb_e6shdbmdejgzqll1wzbnkw74
have-i-been-pwned-verification=dweb_6qqfwejwcqpgxtixghis99ef

Verified for

Google
Google Workspace
Microsoft
Microsoft 365
Miro

Email authentication strong

SPF

v=spf1 mx a ip4:31.24.106.94 ip4:213.246.154.203 ip4:217.68.65.176 ip4:217.68.65.177 ip4:40.81.158.47 ip4:5.61.115.80/28 ip4:167.89.43.190 ip4:20.49.129.121 ip4:20.49.228.255 ip4:20.49.229.147 ip4:20.49.227.70 ip4:20.49.226.83 ip4:167.89.43.190 ip4:10.217.224.66/26 ip4:204.216.114.1/25 ip4:5.61.115.80/28 include:spf.protection.outlook.com include:_spf.elasticemail.com include:spf1.hubspotemail.net include:spf.ecase.co.uk include:spf_g.oraclecloud.com include:nw010.com include:amazonses.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:sfB7rbCDQk8@dmarc-rua.mailcheck.service.ncsc.gov.uk

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJW9Gs9yNnIE8zt9cf7+fCQ+LukVd9/sZ+UBsa7CBlo3IT+0t5r7HuavJQXrIrj1NAui5CGK79qCeu…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGQPR+Y5g3XVXwHS5db1Fiv5Jf+gXln2qBHYnO82fX9O583CxfJGikrKNycMJHoheQjc5ph347dJ3dVJYJ…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30ew2GP2ROkUFmkiofUFl6lJpLZOV785y0twEChQIedHjzh7eH50559mBZWC0YKwVu4N+fN4sE8w/22V9Z…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-09-03 to 2026-09-11

Expires in 113 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://nationalhighways.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' cdn.jsdelivr.net jsdelivr.net c.disquscdn.com disqus.com translations.signapsesolutions.com; script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' js.sitesearch360.com cdn.sitesearch360.com translations.signapsesolutions.com js.monitor.azure.com disqus.com c.disquscdn.com https://*.clarity.ms https://c.bing.com highwaysagency.disqus.com emea3.recruitmentplatform.com s.ytimg.com www.youtube.com maps.googleapis.com unpkg.com apis.google.com www.google-analytics.com widgets.flickr.com wsstatic.govmetric.com www.gstatic.com cdn.syndication.twimg.com platform.twitter.com embedr.flickr.com www.google.com www.googletagmanager.com wsstatic.servmetric.com ajax.aspnetcdn.com cc.cdn.civiccomputing.com cdnjs.cloudflare.com code.jquery.com connect.facebook.net hitcounter.govmetric.com cdn.jsdelivr.net jsdelivr.net websurveys2.govmetric.com websurveys2.servmetric.com www.browsealoud.com; style-src 'unsafe-inline' 'report-sample' 'self' wsstatic.servmetric.com cdn.jsdeliv
strict-transport-security: max-age=31536000; includeSubDomains; preload