nationaltrust.org.uk

HTML metadata

Title: Home | National Trust
Description: We look after the places you love, from houses, buildings and gardens to coast and countryside. Join us and help protect them.
Language: en
Canonical: https://www.nationaltrust.org.uk/

Open Graph

url: https://www.nationaltrust.org.uk/
title: Home
site name: National Trust
description: We look after the places you love, from houses, buildings and gardens to coast and countryside. Join us and help protect them.

Technology

CMS: Next.js

Third-party hosts loaded (1)

nt.global.ssl.fastly.net×21

Social

Contact

Address: © National Trust Registered Charity 205846 Heelis, Kemble Drive, Swindon SN2 2NA

Registration

Registrar

British Telecommunications plc

Created

1996-10-30

Expires

2026-10-30 162 days left

Updated

2025-05-28

Name servers

ns0.bt.net.
ns1.bt.net.
ns2.bt.net.

DNS records live

NS

ns0.bt.net
ns1.bt.net
ns2.bt.net

MX

0 nationaltrust-org-uk.mail.protection.outlook.com

TXT

Show 7 TXT records

ODQ7QE6VTENNUI4NFDW20P3XU023JO4J76Y45FNTX
have-i-been-pwned-verification=fa424d23bc593eba3adc6d9c104eef57
yBb48D5twMC6F2pNt6+ZfNLoR/ZErO7+mFkJ0xcwqlmJaKUHVJ9DmWfX/DDjPnBPsExftRA7dTcATZqZlGXj8g==
00d3z000000fqt1eae
ca3-896387ca5c8c42be948d4c7659a74311
ciscocidomainverification=38cb38e2a770000550ea2f0dae77b8879bb4ad0e289dcab39ad31a6b3e515e17
QtDtFEMWZAxeBtdeVRZcGwbGHZGFFLBeEngyFGPW3kc=

Verified for

Adobe
Apple
Atlassian
GlobalSign
Google
Meta
Microsoft 365

Email authentication partial

SPF

v=spf1 a:mailserver-lutt.whistl.co.uk ip4:82.144.232.19 ip4:20.105.148.200 ip4:20.126.247.145 ip4:52.142.116.234 ip4:62.6.208.108 ip4:62.6.208.110 ip4:20.16.92.63 ip4:40.95.0.0/16 ip4:20.73.64.0 ip4:40.107.10.106/16 include:spf.protection.outlook.com ip4:13.81.240.243 ip4:185.41.10.106 ip4:164.177.142.250 ip4:205.139.105.160/28 ip4:217.68.68.112 ip4:87.237.57.18 ip4:52.212.28.71 ip4:23.23.239.161 ip4:54.243.244.199 ip4:166.78.69.141 ip4:198.2.187.82 ip4:217.72.254.250 include:eu._netblocks.mimecast.com ip4:35.177.63.77 ip4:35.176.182.107 ip4:3.10.122.98 ip4:18.168.17.202 ip4:185.58.84.44 ip4:66.155.82.72 ip4:62.64.192.196 ip4:62.64.192.194 ip4:37.244.88.0/24 ip4:85.133.123.0/24 ip4:198.207.147.224/27 ip4:204.239.0.224/27 ip4:216.230.14.224/27 include:_spf.salesforce.com include:spf.mandrillapp.com ip4:52.212.75.170 include:spf.mailjet.com ip4:66.187.204.0/23 include:turbo-smtp.com ip4:37.244.88.250 ip4:213.122.10.159/32 ip4:31.119.34.217/32 ip4:62.6.208.108/32 ip4:62.6.208.109/32 ip4:62.6.208.110/32 ip4:81.134.228.135 ip4:108.129.2.201/32  include:amazonses.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:69bd2c21de910@ag.dmarcly.com; ruf=mailto:69bd2c21de910@fo.dmarcly.com; sp=none;

policy: none (monitoring only) · sp=none

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunNUCx0GYIA6BWra0IaMiReOX2VbVuZ72cX7pA9ayNZfaqodtfxFDQEDnZ4H2XijWfVwRXLi0VKQNY…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKQZcY73UdFsRQE/sO9jTFYBEnoiAMwpIEaR2a5WRWNJ7p8Soxd1WGRlZD24h1o/OYdOAmz8h41LcH…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJG4p/JYYwLUiYORDdp4ak+hv54xnK0bgME6uruB/hxFtt2KM4cgC1bKJIMlkk2c/IDJHXTy+1UX+3G1KP…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLKMN6s2gE9XA459N9AYjL1L8/fWbbwLCMp/nH0p4NoLtt+nfSPv7xYgmvStDtFsBM/iy8/OYpV/14ESDnGspcJX…

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-11-11 to 2026-12-13

Expires in 207 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.nationaltrust.org.uk/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
missing Permissions Policy

Header values

referrer-policy: no-referrer, same-origin
x-frame-options: DENY
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains