bhf.org.uk

HTML metadata

Title: The biggest independent funder of heart and circulatory research in the UK - BHF
Description: We support people living with heart and circulatory diseases. Thanks to your donations, we fund research to give them more time with their loved ones.
Language: en
Canonical: https://www.bhf.org.uk/

Open Graph

url: https://www.bhf.org.uk/
title: BHF is funding urgently needed research
site name: British Heart Foundation
description: We support people living with heart and circulatory diseases. Thanks to your donations, we fund research to give them more time with their loved ones.

Technology

CDN: Cloudflare

Social

Contact

Phone

+443003303322

Address

180 Hampstead Road, NW1 7AW, London, United Kingdom

Registration

Registrar

CSC Corporate Domains, Inc

Created

1995-05-18

Expires

2026-05-18 expired 1 day ago

Updated

2025-05-14

Name servers

udns1.cscdns.net.
udns2.cscdns.uk.

DNS records live

NS

udns1.cscdns.net
udns2.cscdns.uk

MX

10 bhf-org-uk.mail.protection.outlook.com

TXT

Show 14 TXT records

1dZHOEVzTLUkDm/4ydUWqNKfsr6Bukd3goJ9Lz2xHxI=
r/pk3KF9B4bVOZ7l8/O5VpdVeqGyY6Y3P8F2pKaNFfE=
miro-verification=e4f6d64dd4ea09a01531c91c1c9b23a765bee41e
facebook-domain-verification=m7uax8d4zhnmjroou9eha4xdpbwbmt
google-site-verification=abP4QLZyWJ3818CZOLXbWMiJBI5hVOP8SkuBQCfjaeI
globalsign-domain-verification=7lkcfZFT1-rMbfcXxcLG2kiblzWCBwQlXYjYF4DtBJ
globalsign-domain-verification=iusKo7whykFJMXR05PSFi7s0-qfIAXIN0xkgUJi_vS
globalsign-domain-verification=r9wDp_F3cW1O83TDYUaOfbTz-9d9gc-UVC_rRsJGZS
_globalsign-domain-verification=AegYB5rxjMw7b3rMy2Nta4KblMAHdB6qPHstf6F0Gi
Nb2glDHwWT3XERyqbR6d4JOQaxWXRG9bN6zJQT9VPJQqWZUQnGJaPrCGYCm6mpPGxF0ka2W8DFXJLuBsCddw4A==
atlassian-domain-verification=w80NpvLUbkOyzL2pasTN+rFySFvN1dADQTbUCbPCiail/eVKBb3nr8oNIGxfJOEa
MS=ms38696446
MS=ms42391974
apple-domain-verification=88Ya8zoFYF3uuU9E

Email authentication strong

SPF

v=spf1 include:_u.bhf.org.uk._spf.smart.ondmarc.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; pct=100; fo=1; ri=3600; rua=mailto:92cb2401@inbox.ondmarc.com; ruf=mailto:92cb2401@inbox.ondmarc.com;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iYjdcYlDbkDMrwYxvK6NHYY8IyELdq11kXe43Y56bA+1kpvIx66XfzmC/dpjWHiomzGfbc/dyt2D7…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IiyvrE5fJO0QwIjco8jN5PVKXTbV7gkS94BQPxpGgZO51DqxEqwaGHEIvIQNo08Bk+JvUmARvHeLL…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOfhnQFEaoZ6MkazrF3+rFVNmBYmkbkEqUTwQghej6CwhyK5kZow/jQ3+1GDiyw28dL2/hS4dpn0erVanw…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDivdv3LvlfTztu3JYnadsm2t2wwGwTsp2CnyxtAJyMmhYdbqGgLmi4TuW53Hd+4SjyNVYcAzMSFhEyW83sSeb5/n…

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2026-05-01 to 2026-11-16

Expires in 181 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.bhf.org.uk/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
permissions-policy: accelerometer=(), camera=(), display-capture=(), encrypted-media=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: connect-src 'self' https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://google.com https://ampcid.google.com https://adservice.google.com https://adservice.google.com https://analytics.google.com https://region1.analytics.google.com https://www.google.com https://www.google.co.uk https://www.google-analytics.com https://region1.google-analytics.com https://www.googleadservices.com https://maps.googleapis.com https://pagead2.googlesyndication.com https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.nz https://www.google.co.tz https://www.google.co.uk https://www.google.co.za https://www.google.co.zw https://www.google.com.au https://www.google.com.br https://www.google.com.cy https://www.google.com.eg https://www.google.com.et https://www.google.com.mm https://www.google.com.ng https://www.google.com.sg https://www.google.ae https://www.google.be https://www.google.bf htt
strict-transport-security: max-age=15552000; includeSubDomains; preload