Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 52.31.103.110 |
| Compresión | gzip |
|
🔒 🟡 Mixed Content (1 recursos HTTP) | La página se sirve por HTTPS pero carga 1 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos. |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 52.31.103.110
Compresión gzip
🔒 🟡 Mixed Content (1 recursos HTTP) La página se sirve por HTTPS pero carga 1 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos.
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://npl.co.uk:443 | 301 | HTTP/2 301 |
| 2 | https://www.npl.co.uk/ | 200 | HTTP/2 200 |
#1 URL https://npl.co.uk:443
Código de estado HTTP 301
Estado HTTP/2 301
#2 URL https://www.npl.co.uk/
Código de estado HTTP 200
Estado HTTP/2 200
Rendimiento
| Resolución DNS | 102.5 ms |
| Conexión TCP | 123.7 ms |
| Negociación TLS | 23.1 ms |
| Tiempo hasta el primer byte (TTFB) | 307.1 ms |
| Descarga de contenido | 20.2 ms |
| Tiempo total de respuesta | 327.3 ms |
Resolución DNS 102.5 ms
Conexión TCP 123.7 ms
Negociación TLS 23.1 ms
Tiempo hasta el primer byte (TTFB) 307.1 ms
Descarga de contenido 20.2 ms
Tiempo total de respuesta 327.3 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; preload |
| CSP | ✔ Configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | strict-origin-when-cross-origin |
| Política de Permisos | ✔ Configurado |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; preload
CSP ✔ Configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ✔ nosniff
Política de Referrer strict-origin-when-cross-origin
Política de Permisos ✔ Configurado
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
| Título | National Physical Laboratory - impact from science - NPL |
| Canonical | https://www.npl.co.uk/ |
| Título Open Graph | National Physical Laboratory - impact from science - NPL |
| Descripción Open Graph | National Physical Laboratory (NPL) is the UK’s National Metrology Institute, providing the measurement capability that underpins the UK’s prosperity and quality of life. |
| Imagen Open Graph | https://www.npl.co.uk/getmedia/08f4ff46-09c6-4590-8376-22... |
| Twitter Card | summary |
| Título Twitter | National Physical Laboratory - impact from science - NPL |
| Descripción Twitter | National Physical Laboratory (NPL) is the UK’s National Metrology Institute, providing the measurement capability that underpins the UK’s prosperity and quality of life. |
| Imagen Twitter | https://www.npl.co.uk/getmedia/08f4ff46-09c6-4590-8376-22... |
Título National Physical Laboratory - impact from science - NPL Canonical https://www.npl.co.uk/ Título Open Graph National Physical Laboratory - impact from science - NPL Descripción Open Graph National Physical Laboratory (NPL) is the UK’s National Metrology Institute, providing the measurement capability that underpins the UK’s prosperity and quality of life. Imagen Open Graph https://www.npl.co.uk/getmedia/08f4ff46-09c6-4590-8376-22... Twitter Card summary Título Twitter National Physical Laboratory - impact from science - NPL Descripción Twitter National Physical Laboratory (NPL) is the UK’s National Metrology Institute, providing the measurement capability that underpins the UK’s prosperity and quality of life. Imagen Twitter https://www.npl.co.uk/getmedia/08f4ff46-09c6-4590-8376-22... Tecnologías Detectadas
| Tecnología | jQuery Google Analytics Google Tag Manager Hotjar |
Tecnología jQuery Google Analytics Google Tag Manager Hotjar
Cabeceras HTTP
| Content-type
| text/html; charset=utf-8 |
| Vary
| Accept-Encoding |
| Strict-transport-security
| max-age=31536000; preload |
| Referrer-policy
| strict-origin-when-cross-origin |
| Access-control-allow-origin
| https://www.npl.co.uk |
| X-content-type-options
| nosniff |
| X-permitted-cross-domain-policies
| none |
| X-xss-protection
| 1; mode=block |
| Expect-ct
| max-age=0, enforce |
| Permissions-policy
| accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), clipboard-read=("https://*.npl.co.uk" "https://*.hosted.positive.co.uk" "https://*.local" "https://*.npl.local") |
| Content-security-policy
| default-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' *.pingdom.net *.npl.co.uk *.onetrust.com *.linkedin.com googleads.g.doubleclick.net cdn.jsdelivr.net npl-digital.gitlab-docs.npl.co.uk *.reciteme.com *.fonts.net assets.calendly.com https://*.hotjar.com www.buzzsprout.com www.gstatic.com www.googletagmanager.com www.google-analytics.com *.google.com maps.googleapis.com ajax.googleapis.com code.jquery.com unpkg.com cc.cdn.civiccomputing.com player.vimeo.com script.crazyegg.com;manifest-src 'self';style-src 'self' 'unsafe-inline' https://*.hotjar.com *.reciteme.com *.fonts.net assets.calendly.com fonts.googleapis.com unpkg.com *.typekit.net;connect-src 'self' https://cdn.jsdelivr.net https://npl-capp-ntpsvr01-dev.wittycoast-2cbd4e09.uksouth.azurecontainerapps.io https://npl-capp-ntpsvr02-dev.wittycoast-2cbd4e09.uksouth.azurecontainerapps.io *.pingdom.net *.google-analytics.com vc.hotjar.io *.onetrust.com google.com npl-app-ntpsvr-prod.azurewebsites.net ws.hotjar.com metrics.hotjar.io content.hotjar.io surveystats.hotjar.io *.reciteme.com www.google-analytics.com maps.googleapis.com *.google.com *.doubleclick.net wss://ws.hotjar.com;font-src 'self' data: *.fonts.net https://*.hotjar.com *.reciteme.com fonts.gstatic.com *.typekit.net;frame-ancestors 'self' admin.npl.local *.cubeddigital.com *.hosted.positive.co.uk uat-cms.npl.co.uk cms.npl.co.uk;frame-src 'self' *.typeform.com go.www.npl.co.uk *.linkedin.com www.googletagmanager.com go.pardot.com www.amrislive.com td.doubleclick.net *.cubeddigital.com *.hosted.positive.co.uk *.youtube-nocookie.com *.youtube.com *.google.com player.vimeo.com cdn.yoshki.com www.buzzsprout.com;img-src 'self' google.co.in cdn-ukwest.onetrust.com www.google.co.uk *.reciteme.com *.google-analytics.com *.googletagmanager.com *.google.com https://*.hotjar.com api.mapbox.com maps.gstatic.com maps.googleapis.com *.vimeocdn.com data:;worker-src 'self' blob: *.cubeddigital.com *.hosted.positive.co.uk *.npl.co.uk;media-src 'self' *.reciteme.com;form-action 'self'; |
| Date
| Wed, 22 Jul 2026 16:40:12 GMT |
| Sversion
| PALSS 10.1.1.110222 |
| Scluster
| hd1-ams.hybridcloudspan.com |
| X-ssl-protocol
| TLSv1.3 |
| Cache-control
| no-store, no-cache, must-revalidate |
| Content-encoding
| gzip |
Meta Tags
| Viewport | width=device-width, initial-scale=1, user-scalable=no |
Content-type text/html; charset=utf-8
Vary Accept-Encoding
Strict-transport-security max-age=31536000; preload
Referrer-policy strict-origin-when-cross-origin
Access-control-allow-origin https://www.npl.co.uk
X-content-type-options nosniff
X-permitted-cross-domain-policies none
X-xss-protection 1; mode=block
Expect-ct max-age=0, enforce
Permissions-policy accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), clipboard-read=("https://*.npl.co.uk" "https://*.hosted.positive.co.uk" "https://*.local" "https://*.npl.local")
Content-security-policy default-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' *.pingdom.net *.npl.co.uk *.onetrust.com *.linkedin.com googleads.g.doubleclick.net cdn.jsdelivr.net npl-digital.gitlab-docs.npl.co.uk *.reciteme.com *.fonts.net assets.calendly.com https://*.hotjar.com www.buzzsprout.com www.gstatic.com www.googletagmanager.com www.google-analytics.com *.google.com maps.googleapis.com ajax.googleapis.com code.jquery.com unpkg.com cc.cdn.civiccomputing.com player.vimeo.com script.crazyegg.com;manifest-src 'self';style-src 'self' 'unsafe-inline' https://*.hotjar.com *.reciteme.com *.fonts.net assets.calendly.com fonts.googleapis.com unpkg.com *.typekit.net;connect-src 'self' https://cdn.jsdelivr.net https://npl-capp-ntpsvr01-dev.wittycoast-2cbd4e09.uksouth.azurecontainerapps.io https://npl-capp-ntpsvr02-dev.wittycoast-2cbd4e09.uksouth.azurecontainerapps.io *.pingdom.net *.google-analytics.com vc.hotjar.io *.onetrust.com google.com npl-app-ntpsvr-prod.azurewebsites.net ws.hotjar.com metrics.hotjar.io content.hotjar.io surveystats.hotjar.io *.reciteme.com www.google-analytics.com maps.googleapis.com *.google.com *.doubleclick.net wss://ws.hotjar.com;font-src 'self' data: *.fonts.net https://*.hotjar.com *.reciteme.com fonts.gstatic.com *.typekit.net;frame-ancestors 'self' admin.npl.local *.cubeddigital.com *.hosted.positive.co.uk uat-cms.npl.co.uk cms.npl.co.uk;frame-src 'self' *.typeform.com go.www.npl.co.uk *.linkedin.com www.googletagmanager.com go.pardot.com www.amrislive.com td.doubleclick.net *.cubeddigital.com *.hosted.positive.co.uk *.youtube-nocookie.com *.youtube.com *.google.com player.vimeo.com cdn.yoshki.com www.buzzsprout.com;img-src 'self' google.co.in cdn-ukwest.onetrust.com www.google.co.uk *.reciteme.com *.google-analytics.com *.googletagmanager.com *.google.com https://*.hotjar.com api.mapbox.com maps.gstatic.com maps.googleapis.com *.vimeocdn.com data:;worker-src 'self' blob: *.cubeddigital.com *.hosted.positive.co.uk *.npl.co.uk;media-src 'self' *.reciteme.com;form-action 'self';
Date Wed, 22 Jul 2026 16:40:12 GMT
Sversion PALSS 10.1.1.110222
Scluster hd1-ams.hybridcloudspan.com
X-ssl-protocol TLSv1.3
Cache-control no-store, no-cache, must-revalidate
Content-encoding gzip
