heritagefund.org.uk

HTML metadata

Title

The National Lottery Heritage Fund: Home

Description

As the largest funder for the UK’s heritage, our vision is for heritage to be valued, cared for and sustained for everyone, now and in the future.

Language

en

Generator

Drupal 11 (https://www.drupal.org)

Canonical

https://www.heritagefund.org.uk/

Translations

cy
en

Feeds

Open Graph

url: https://www.heritagefund.org.uk/welcome
title: Welcome
site name: The National Lottery Heritage Fund

Technology

CDN: Fastly
CMS: Drupal

Social

Contact

Address: ['4th Floor', 'Cannon Bridge House', '25 Dowgate Hill'], EC4R 2YA, London, London, UK

Registration

Registrar

GoDaddy.com, LLC.

Created

2018-07-13

Expires

2026-07-13 53 days left

Updated

2024-07-07

Name servers

ns21.domaincontrol.com.
ns22.domaincontrol.com.

DNS records live

NS

ns21.domaincontrol.com
ns22.domaincontrol.com

MX

0 heritagefund-org-uk.mail.protection.outlook.com

TXT

v=verifydomain MS=5409094
ne5d0n3oa1g820p62tvtuvtq89
aop5g216t7400tmc5jk5j8mhd9

Verified for

Atlassian
Figma
Google
Meta
Microsoft
Microsoft 365
Miro
Workplace

Email authentication strong

SPF

v=spf1 include:ciphr247.com include:spf.protection.outlook.com include:_spf.salesforce.com include:infosecmail.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:6X9actC6knC@dmarc-rua.mailcheck.service.ncsc.gov.uk,mailto:DMARCReportHFUND@heritagefund.org.uk;

policy: reject (enforced)

DKIM

Show 11 DKIM selectors

default: v=DKIM1; p=
google: v=DKIM1; p=
selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCcAcyWNQJ8p5z7hBrH3OP15IDFwXgMRH0j9QTt473DnC8JWNskbYJu9LOR8+Clr+Y/IbAUpfexdnRbeIrT0X…
k1: v=DKIM1; p=
k2: v=DKIM1; p=
mail: v=DKIM1; p=
dkim: v=DKIM1; p=
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/UQKlFNYbpGQM5q0Awh2OpZEFKZmgPw1P8LuXpdTE7Go5oKQD7ad3CZEu+CMTyM9h1vGn0fn0R2VsOZWf…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDWs6uZQe2cKaFYY5C6862E7Uwtui0yr1EwBWZ1wNtZFIVZvkWQSNxzvJRX72oiu/UVCUD3KYafCVdPLzW0jTf5iH…
mxvault: v=DKIM1; p=
smtpapi: v=DKIM1; p=

selectors probed

Certificate (current)

R12

from 2026-04-07 to 2026-07-06

Expires in 47 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.heritagefund.org.uk/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: object-src 'none'; frame-ancestors 'self'; report-uri https://www.heritagefund.org.uk/report-uri/enforce
strict-transport-security: max-age=31557600
content-security-policy-report-only: object-src 'none'; script-src 'self' 'unsafe-inline' https://cdn.matomo.cloud https://heritagefund.matomo.cloud https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://naver.github.io https://player.vimeo.com https://unpkg.com https://www.gstatic.com https://heritagefund.matomo.cloud/; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://cdn.matomo.cloud https://heritagefund.matomo.cloud https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://naver.github.io https://player.vimeo.com https://unpkg.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://p.typekit.net https://cdn.jsdelivr.net https://naver.github.io; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://p.typekit.net/ https://cdn.jsdelivr.net https://naver.github.io; frame-ancestors 'self'