baptist-heartofengland.org

.org crawl

First seen 2026-04-24 · Last seen 2026-05-18 · ok HTTP/1.1 200 20984 ms crawled 2026-05-18

GB · 85.13.213.3 · AS31708 Coreix Ltd

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Heart of England Baptist Association
Description
As one of the Baptist Union regional associations, we have a dedicated team of regional ministers and administration staff that support the local church pastorally, advise on mission and practical matters, and organise training events.
Language
en
Canonical
https://www.baptist-heartofengland.org
Feeds

Open Graph

title
The Heart of England Baptist Association
description
As one of the Baptist Union regional associations, we have a dedicated team of regional ministers and administration staff that support the local church pastorally, advise on mission and practical matters, and organise training events.

Technology

CMS
Joomla

Third-party hosts loaded (1)

  • js.stripe.com×1

Social

Contact

Phone
Address
st Midlands B73 5BPEmail:mailbox@baptist-heartofengland.orgTel:07305

Registration

Registrar
NameCheap, Inc.
Created
2000-08-02
Expires
2026-08-02 73 days left
Updated
2025-07-08
Name servers
  • dns1.registrar-servers.com
  • dns2.registrar-servers.com

DNS records live

NS
  • dns1.registrar-servers.com
  • dns2.registrar-servers.com
MX
  • 0 baptistheartofengland-org01i.mail.protection.outlook.com
Verified for
  • Microsoft 365

Email authentication weak

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-05-15 to 2026-08-13
Expires in 84 days

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.baptist-heartofengland.org/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
Header values
referrer-policy
strict-origin-when-cross-origin
permissions-policy
geolocation=(*),midi=(),sync-xhr=(*),microphone=(),camera=(*),magnetometer=(*),gyroscope=(*),fullscreen=(*),payment=(*)
x-content-type-options
nosniff
content-security-policy
default-src https: wss:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; media-src https: blob:; worker-src https: blob:; frame-ancestors https:; form-action 'self' https:;
strict-transport-security
max-age=31536000; includeSubDomains

Links to (5)

Linked from (1)