jhf.org

.org crawl

First seen 2026-04-20 · Last seen 2026-05-16 · ok HTTP/1.1 200 1077 ms crawled 2026-05-13

US · 76.76.21.21 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

sector nonprofit type homepage

HTML metadata

Title: Jewish Healthcare Foundation
Description: The Jewish Healthcare Foundation advances healthcare innovation, advocacy, collaboration, and education to improve health.
Language: en
Canonical: https://jhf.org/home-jewish-healthcare-foundation/

Open Graph

url: https://jhf.org/home-jewish-healthcare-foundation/
title: Jewish Healthcare Foundation
locale: en_US
description: The Jewish Healthcare Foundation advances healthcare innovation, advocacy, collaboration, and education to improve health.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (3)

js.hsforms.net×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1996-09-30

Expires

2027-09-29 498 days left

Updated

2022-08-08

Name servers

ns79.worldnic.com
ns80.worldnic.com

DNS records live

NS

ns79.worldnic.com
ns80.worldnic.com

MX

10 mx1-us1.ppe-hosted.com
10 mx2-us1.ppe-hosted.com

TXT

linkedin-site-verification=c5d304f9-c7b9-4517-9d99-a4228969de4a
MS=ms69433176
google-site-verification=A1FKUu8dBTcKy932Ae0WodCV2ZOiAkflnaD65mOcE8Y

Email authentication partial

SPF

v=spf1 a:dispatch-us.ppe-hosted.com include:amazonses.com include:21512080.spf03.hubspotemail.net include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:administrator@jhf.org; ruf=mailto:administrator@jhf.org;

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

R13

from 2026-04-11 to 2026-07-10

Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://jhf.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.hsforms.net *.googletagmanager.com *.google.com *.gstatic.com; style-src 'self' 'unsafe-inline' *.typekit.net fonts.googleapis.com; img-src * blob: data:; media-src 'none'; connect-src *; font-src 'self' data: fonts.gstatic.com *.typekit.net; frame-src *;
strict-transport-security: max-age=31536000; includeSubDomains; preload