chuffed.org

HTML metadata

Title: Chuffed | Non-profit charity and social enterprise fundraising
Description: Chuffed is a crowdfunding platform for socially-conscious projects. We support individuals, not-for-profits, social enterprises and community groups to run awesome crowdfunding campaigns, all 100% free.
Language: en

Open Graph

url: https://chuffed.org
title: Chuffed
site name: Chuffed.org
description: Chuffed is a crowdfunding platform for socially-conscious projects. We support individuals, not-for-profits, social enterprises and community groups to run awesome crowdfunding campaigns, all 100% free.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

d1ueir2rcqs7wj.cloudfront.net×12
fonts.googleapis.com×4
cdn-cookieyes.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Email

support@chuffed.org

Registration

Registrar

GoDaddy.com, LLC

Created

2005-03-10

Expires

2027-03-10 295 days left

Updated

2026-04-24

Name servers

art.ns.cloudflare.com
mimi.ns.cloudflare.com

DNS records live

NS

art.ns.cloudflare.com
mimi.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 spmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=XsMVwfLprcFrZae0bZWSlyka6Geb4xnBS2xBEfzpVkg
google-site-verification=6gYQTAb6NUXtnNPGnnhcX_LxWdp0CX9uQPNU-YebmaA

Email authentication strong

SPF

v=spf1 include:mailgun.org include:spf.mandrillapp.com include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:13359bcec3@rua.easydmarc.com;ruf=mailto:13359bcec3@ruf.easydmarc.com;ri=86400;fo=1;

policy: reject (enforced)

DKIM

default: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCx/5dlbTvZq/qur1+tJ8xrbC325SkdIn2BBofdjwiRI7RzCVeNasd3Y7HOM2t3G1CylBgcpVVkDmeENMo1JJo6A4A+8k2…
google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGOsSiHLNeW4QX0+xQYiVVc6eSRIjAv95mi8CSmFUt1l7+Aqi579Vthfk+6NOOoIQDOTJjPDYP71Vf…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

WE1

from 2026-05-05 to 2026-08-03

Expires in 76 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://chuffed.org/

present

strict-transport-security
content-security-policy-report-only
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
missing Content Security Policy
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=(), camera=(), microphone=(), usb=()
x-content-type-options: nosniff
strict-transport-security: max-age=86400
content-security-policy-report-only: default-src 'self'; script-src 'self' 'nonce-DDVGvDKGL6nfMDZMXdVHIw==' d1ueir2rcqs7wj.cloudfront.net js.stripe.com *.paypal.com www.paypalobjects.com *.googletagmanager.com *.gstatic.com www.google-analytics.com www.google.com connect.facebook.net challenges.cloudflare.com cdn.segment.com cdn-cookieyes.com browser.sentry-cdn.com *.filepicker.io *.vimeo.com *.youtube.com *.youtube-nocookie.com *.youtu.be; style-src 'self' 'unsafe-inline' d1ueir2rcqs7wj.cloudfront.net fonts.googleapis.com *.filepicker.io *.vimeo.com *.youtube.com *.youtube-nocookie.com *.youtu.be; font-src 'self' d1ueir2rcqs7wj.cloudfront.net fonts.gstatic.com data:; img-src 'self' data: d1ueir2rcqs7wj.cloudfront.net *.facebook.com www.google-analytics.com *.googletagmanager.com *.amazonaws.com *.chuffed.org dev.visualwebsiteoptimizer.com *.filepicker.io *.vimeo.com *.youtube.com *.youtube-nocookie.com *.youtu.be; connect-src 'self' d1ueir2rcqs7wj.cloudfront.net *.stripe.com *.stripe.network *.paypal.com api.paypal.com *