ethcf.org

.org crawl

First seen 2026-04-13 · Last seen 2026-05-13 · ok HTTP/1.1 200 629 ms crawled 2026-05-06

US · 104.18.9.191 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

sector nonprofit type homepage

HTML metadata

Title: Ethereum Community Foundation (ECF)
Description: The Ethereum Community Foundation (ECF) builds token-free public infrastructure that strengthens ETH & benefits its holders.
Language: en
Canonical: https://ethcf.org/

Open Graph

url: https://ethcf.org/
title: Ethereum Community Foundation (ECF)
description: The Ethereum Community Foundation (ECF) builds token-free public infrastructure that strengthens ETH & benefits its holders.

Technology

CDN: Cloudflare

Registration

Registrar

Tucows Domains Inc.

Created

2025-05-28

Expires

2027-05-28 374 days left

Updated

2026-05-04

Name servers

bryce.ns.cloudflare.com
evangeline.ns.cloudflare.com

DNS records live

NS

bryce.ns.cloudflare.com
evangeline.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=63n_vcmlpoWvUHOP1bDWFhbrBRxh5y5QLDDjP0o5Y_A

Email authentication partial

SPF: v=spf1 include:_spf.google.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-22 to 2026-07-21

Expires in 63 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://ethcf.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://api.airtable.com https://api.coingecko.com https://api.kraken.com https://api.ethva.org; media-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';
strict-transport-security: max-age=31536000; includeSubDomains