🛡 Security Posture — 6/7 checks passing
HTTPS
✓ Yes
HSTS
✓ Yes
SPF
fail
DMARC
✗ No
robots.txt
✓ Yes
security.txt
✓ Yes
sitemap.xml
✓ Yes
🌐 DNS Records
| A | 52.85.47.101 |
| 52.85.47.83 | |
| 52.85.47.38 | |
| 52.85.47.14 | |
| MX | 0 gchq-gov-uk.mail.protection.outlook.com. |
| NS | ns-1184.awsdns-20.org. |
| ns-1819.awsdns-35.co.uk. | |
| ns-6.awsdns-00.com. | |
| ns-706.awsdns-24.net. | |
| TXT | "MS=ms17977862" (Microsoft MS Verification) |
| "amazonses:VktexqzOVP7vQB/fKy0ZMQXQV7gVsvBSL7VbvLGjMSA=" | |
| "atlassian-domain-verification=P5b6jgdlojv9n85MBIqaa2Bdaai9uMYqUnNahEmU8ToeXUM9o9/WZqGaKuJeZzoD" (Atlassian Verification) | |
| "cisco-ci-domain-verification=27302cbc39b443d07f184d9125eb30d9b48aebda83cc1e356a036352960ed3d5" | |
| "google-site-verification=850gZ_dCicEncj1kgHN2lJLLQTGSwC5wIidIyheIVQQ" (Google Site Verification) | |
| "jamf-site-verification=YLEKKGJU1ziI9AcFlxWWJw" (Jamf Verification) | |
| "v=spf1 include:spf.protection.outlook.com -all" (SPF) | |
| SOA | ns-1819.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 |
📋 WHOIS
Registrant UK Cabinet Office
Type UK Government Body
Registered 1996-08-01T00:00:00+00:00
Registrar No registrar listed. This domain is directly registered with Nominet.
⚡ HTTP Details
Status 200
Server cloudflare
DNS Host AWS Route 53
Final URL https://www.gchq.gov.uk/
Content-Type text/html
📧SPF Record — policy: fail
v=spf1 include:spf.protection.outlook.com -all
🔐security.txt
Canonical: https://www.gchq.gov.uk/.well-known/security.txt
Contact: mailto:security@ncsc.gov.uk
Encryption: https://www.gchq.gov.uk/sites/default/files/2026-02/ncsc_public_2026-09-11_3446EC55.asc
Expires: 2026-11-09T00:00:00Z
Policy: https://www.ncsc.gov.uk/vulnerability-reporting
Preferred-Languages: en
🤖robots.txt
# As a condition of accessing this website, you agree to abide by the following
# content signals:
# (a) If a Content-Signal = yes, you may collect content for the corresponding
# use.
# (b) If a Content-Signal = no, you may not collect content for the
# corresponding use.
# (c) If the website operator does not include a Content-Signal for a
# corresponding use, the website operator neither grants nor restricts
# permission via Content-Signal with respect to the correspon
Data collected: 21 June 2026