bbfc.co.uk

.uk crawl

First seen 2026-04-28 · Last seen 2026-05-18 · ok HTTP/1.1 200 5865 ms crawled 2026-05-05

IE · 52.31.43.133 · AS16509 Amazon.com, Inc.

Reputation 100/100

sector government type homepage

HTML metadata

Title
British Board of Film Classification (BBFC) | BBFC
Description
We help children and families across the UK choose content well – whatever they watch, wherever and however they watch it.
Language
en
Canonical
https://www.bbfc.co.uk/

Open Graph

url
https://www.bbfc.co.uk/
title
British Board of Film Classification (BBFC)
description
We help children and families across the UK choose content well – whatever they watch, wherever and however they watch it.

Technology

Server
istio-envoy
CMS
Next.js
Fonts
  • Adobe Fonts

Third-party hosts loaded (3)

  • queue.simpleanalyticscdn.com×1
  • scripts.simpleanalyticscdn.com×1
  • use.typekit.net×1

Social

Contact

Email
Phone

Registration

Registrar
Cloudflare, Inc.
Created
1998-01-12
Expires
2027-01-12 237 days left
Updated
2025-12-13
Name servers
  • lily.ns.cloudflare.com.
  • robert.ns.cloudflare.com.

DNS records live

NS
  • lily.ns.cloudflare.com
  • robert.ns.cloudflare.com
MX
  • 10 cloud15.spamtitan.com
  • 20 cloud16.spamtitan.com
TXT
  • v=spf1 ip4:52.56.177.210 ip4:52.56.159.11 include:amazonses.com include:_spf.google.com include:mailgun.org include:email.prnewswire.com ~all
  • 73895ece6e
Verified for
  • Atlassian
  • Google
  • Microsoft 365

Certificate (current)

E8
from 2026-03-20 to 2026-06-18
Expires in 29 days

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.bbfc.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
origin,unsafe-url
x-frame-options
Sameorigin
permissions-policy
fullscreen=(self "https://player.vimeo.com"), sync-xhr=()
x-content-type-options
nosniff
content-security-policy
object-src 'none';frame-ancestors 'self';default-src * 'self' 'unsafe-eval' 'unsafe-inline' blob:
strict-transport-security
max-age=31536000; includeSubDomains

Links to (4)

Linked from (2)