thecrownestate.co.uk

HTML metadata

Title: Home | The Crown Estate
Description: The Crown Estate is an independent business sitting between the public and private sectors, acting in national interests both today and for future generations. Across communities, countryside, coast and seabed, we manage land for the benefit of the nation.
Language: en-GB
Canonical: https://www.thecrownestate.co.uk

Open Graph

title: Home
locale: en
site name: The Crown Estate
description: The Crown Estate is an independent business sitting between the public and private sectors, acting in national interests both today and for future generations. Across communities, countryside, coast and seabed, we manage land for the benefit of the nation.

Technology

CDN: Azure Front Door
CMS: Next.js

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (9)

www.datocms-assets.com×14
cookie-cdn.cookiepro.com×2
use.typekit.net×2
cdn.speedcurve.com×1
fast.fonts.net×1
googletagmanager.com×1
images.ctfassets.net×1
js.monitor.azure.com×1
stream.mux.com×1

Social

Contact

Email

enquiries@thecrownestate.co.uk

Phone

020 7851 5000

Address

1 St James’s Market, SW1Y 4AH, London, GB

Registration

Registrar

Netscan Limited

Created

2000-08-17

Expires

2026-08-17 88 days left

Updated

2025-08-10

Name servers

chelsea.ns.cloudflare.com.
leonidas.ns.cloudflare.com.

DNS records live

NS

chelsea.ns.cloudflare.com
leonidas.ns.cloudflare.com

MX

0 thecrownestate-co-uk.mail.protection.outlook.com
32767 ms52576143.msv1.invalid

TXT

Show 4 TXT records

hes=3101a6313884674be860d01893b8fda0
mandrill_verify.xs2SeftdNLs6H2zEA0zSow
meltwater_sso_20260417.txt
MS=6E7443B6CA10DEBFF6F571C430C9B5EC0981BD53

Verified for

Adobe
DocuSign
Dynamics 365
Microsoft 365
Miro

Email authentication strong

SPF

v=spf1 ip4:192.254.125.237 include:spf.ssmx.net include:spf.protection.outlook.com include:spf.emailsignatures365.com include:spf.mandrillapp.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email;

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7+A6PngYpIObp1WOv93XNzCXTEBRJSmwKz+KDB2rpqJqGs3zFlb2ohFa5hAmy5etn19iJhTtQkj2Nn7l/F2…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfuVxmsQzpjeBy80fcxiEcVHktUL7X+orRuGrhJnEQfxGjrqV56kU16rA5lttfEesLrG+gLdRJ4Yd60M1GL6…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNnl9Dce2M3psDFib5vHIVjgUdMzF+zcKRd0e2dZ6gLFk+/u48t4K9FEQmLyanA3TDbbE0pSCMdDB/mvCD…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSbRl6U0OPPPFC8nzj2yReUfazV/3TmHmh8PPwYDptYX3dW1fCQ01Gg2YjcLZeOBv21co8QmYZ3v23nVK72Q1aK1…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-12 to 2026-08-13

Expires in 84 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.thecrownestate.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: ambient-light-sensor=(), battery=(), camera=(), display-capture=(), document-domain=(), fullscreen=(self "https://videos.ctfassets.net"), gamepad=(), geolocation=(), gyroscope=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: img-src 'self' data: https: images.ctfassets.net cookie-cdn.cookiepro.com lux.speedcurve.com *.reciteme.com *.googleapis.com; media-src 'self' https: *.ctfassets.net/; connect-src 'self' https: cookie-cdn.cookiepro.com *.applicationinsights.azure.com *.google-analytics.com *.reciteme.com *.googletagmanager.com *.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https: *.googletagmanager.com js.monitor.azure.com cookie-cdn.cookiepro.com cdn.speedcurve.com www.youtube.com api.reciteme.com; style-src 'self' 'unsafe-inline' api.reciteme.com fonts.googleapis.com fast.fonts.net *.typekit.net; frame-src 'self' *.googletagmanager.com www.youtube.com www.instagram.com my.matterport.com viewings.ehouse.co.uk www.google.com universe.queue-it.net universe.com *.universe.com priorptnrs.s3.eu-west-2.amazonaws.com;
strict-transport-security: max-age=2592000