donorschoose.org
HTML metadata
Technology
- Ads
-
- Google Ads (DoubleClick)
Third-party hosts loaded (7)
- cdn.donorschoose.net×12
- ajax.googleapis.com×1
- cdn.cookie-script.com×1
- cdn.heapanalytics.com×1
- geo.cookie-script.com×1
- geoip-js.com×1
- stats.g.doubleclick.net×1
Social
Contact
- Phone
- Address
- st possible ratings fromCharity Watch,Charity Navigator, andGuidestar.EIN: 13-41294
Registration
- Registrar
- Amazon Registrar, Inc.
- Created
- 2000-03-26
- Expires
- 2027-03-26 310 days left
- Updated
- 2026-05-05
- Name servers
-
- ns-1305.awsdns-35.org
- ns-113.awsdns-14.com
- ns-1737.awsdns-25.co.uk
- ns-874.awsdns-45.net
DNS records live
- NS
-
- ns-113.awsdns-14.com
- ns-1305.awsdns-35.org
- ns-1737.awsdns-25.co.uk
- ns-874.awsdns-45.net
- MX
-
- 10 aspmx.l.google.com
- 30 alt1.aspmx.l.google.com
- 30 alt2.aspmx.l.google.com
- 50 alt3.aspmx.l.google.com
- 50 alt4.aspmx.l.google.com
- TXT
-
rippling-domain-verification=021053edda68793a5wgz7n0dw12j6c8j7g454nrlpzzvwjk4Validity-Domain-Verification=**45lkj34656vdwe57**
- Verified for
-
- Atlassian
- Canva
- Meta
- Miro
- OpenAI
Email authentication strong
- SPF
-
v=spf1 a include:sendgrid.net include:_spf.google.com include:mail.zendesk.com include:_spf.psm.knowbe4.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarcmonitor@donorschoose.org,mailto:dmarc_fr@dmarc.250ok.net; ruf=mailto:dmarc_fr@dmarc.250ok.net; fo=0; adkim=r; aspf=r; pct=100; rf=afrfpolicy: reject (enforced) - DKIM
-
Show 5 DKIM selectors
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDnY11QUvs5KQB5iQm1PwEsVlsCm8WV/H+p2GwgXIcbcK/1vEmyPMI+mXFRXgAS/70nFPScHS1bi38QEg7Wr4… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54hK14p14Tqcipebn5lRR6OzBMeQqXaARkBsV941s1Aj1F5ecuR0eeqnC/Ruf1S+BdoTJ32VXLOuaApxbp… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFdKgNI8h/ajF0BunRj/tkCteG2YmmTCBFgcoTeub2rG57BeiY6vkrXTzYDUVMEgPCXBeD9/iiVwqmCmO5J6cSaT… - smtpapi:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…
selectors probed - google:
Certificate (current)
GlobalSign Atlas R3 DV TLS CA 2025 Q4
Expires in 206 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
script-src 'strict-dynamic' 'nonce-ea55c77fd71b4268a0d38e2f923beb16' https: 'unsafe-inline' 'unsafe-eval' 'sha256-Uso0LfeBshT35JP1WDzn9KF9S1vFB3Qjf3whX63+p9Y' 'sha256-cWB6LeQeTPFHH9QCg8VrP0sPJfqqdgDupHwitbxysNo' 'sha256-up0uZfQVTmUQiOTQxNJmLrgq6IRkI7viZcpQMmVQl4o' 'sha256-1DKvbN+HgsZeFhE0aOvW80/CLSZqmIf80iKV8fr7Zms' 'sha256-Cew3JHaYZQh1NXER6+zMiIs0A5T4VeVm7LE56DDuTeQ' 'sha256-7IWl402jAQKfrGk0oeHEc2rO55/ibilfjzw9t/wh2zE' 'sha256-7kB9hVY6TOyKnT4HzvfGkVb5WepuCfi78o2NoWu0diI' 'sha256-rugzeIeOAbHu8C2ZBKnm6BEVkJn83Qjckw74j9LCVhg' 'sha256-8RIg1eUhopcNp9CzGBkk+nhNOkAoJ38tBWvNCcqx42M' 'sha256-4kdQEMufGIybwc/IpC5J8LiTAYOZ3uyqXbdNNxR9G18' 'sha256-MujPPKAkqxKI8F8pVMdmvdGMYzioyawJAheU44lV+ZY'; object-src https://secure.donorschoose.org/ https://donorschoose-storage.s3.amazonaws.com/; base-uri https://www.donorschoose.org/ https://secure.donorschoose.org/; report-uri https://www.donorschoose.org/common/csp-report.html; frame-ancestors 'self' https://*.donorschoose.org https://*.donorschoose.net- strict-transport-security
max-age=15768000; includeSubDomains