berkshiretaconic.org

HTML metadata

Title: Berkshire Taconic Community Foundation | Homepage - Main
Description: Foundation Facts More about the foundation Place-based Philanthropy Berkshire, Columbia, Dutchess, Litchfield BTCF serves a unique area where New York,…
Language: en
Generator: SEOmatic
Canonical: https://berkshiretaconic.org/

Open Graph

url: https://berkshiretaconic.org/
title: Berkshire Taconic Community Foundation | Homepage - Main
locale: en_US
see also: https://twitter.com/BTCF
site name: Berkshire Taconic Community Foundation
description: Foundation Facts More about the foundation Place-based Philanthropy Berkshire, Columbia, Dutchess, Litchfield BTCF serves a unique area where New York,…

Technology

Server: nginx-rc

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

btcf.nyc3.digitaloceanspaces.com×23
fonts.googleapis.com×2
fonts.gstatic.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Phone

Address

800 North Main Street, 01257-9503, Sheffield, MA, US

Registration

Registrar

GoDaddy.com, LLC

Created

1999-07-09

Expires

2026-07-09 49 days left

Updated

2025-08-23

Name servers

ns77.domaincontrol.com
ns78.domaincontrol.com

DNS records live

NS

ns77.domaincontrol.com
ns78.domaincontrol.com

MX

0 berkshiretaconic-org.mail.protection.outlook.com

TXT

v=verifydomain MS=2541647

Verified for

Dropbox

Email authentication strong

SPF

v=spf1 ip4:24.39.198.10 include:sendgrid.net include:spf.protection.outlook.com include:_spf.psm.knowbe4.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKq7nlSu3PTJqRVgwSE3A1Y5w0VyzpFkkyDzyvuFYAOLLhx/7AoaiS/aG7CYbzrh9tEbRooreMYGKMCXfg30…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAX2xwl1rGe/XSogvR2CMBoas72S1DtPNeiDK+Tp8ygeOaeo+e7qwJj0qzhpcR5mr9hsf0cptXVn+8T0ua…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1cPcpl7m4jnp5QW2PoqGdnKz/1IN/D84tuHF4742dQcs5277Ao76ivIOKbVhQwPTjRSaAnjKy1zfwcFl2…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-08-01 to 2026-08-02

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://berkshiretaconic.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(), fullscreen=(self), payment=(self), accelerometer=(), gyroscope=(), magnetometer=(), usb=(), ambient-light-sensor=(), autoplay=(self), interest-cohort=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'none'; connect-src 'self' *.google.com *.doubleclick.net *.craftcms.com *.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.facebook.net *.google.com *.gstatic.com https://recruitingbypaycor.com; style-src 'self' 'unsafe-inline' https:; object-src 'none'; media-src *.digitaloceanspaces.com; base-uri 'self'; img-src data: https:; font-src https:; frame-src 'self' *.google.com *.youtube.com *.vimeo.com *.stripe.com *.facebook.com https://recruitingbypaycor.com; frame-ancestors 'self'; manifest-src 'self'; form-action 'self' https://berkshiretaconic.org *.facebook.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-modals allow-top-navigation allow-downloads allow-popups-to-escape-sandbox allow-presentation
strict-transport-security: max-age=15552000