fightcancer.org

.org crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 541 ms crawled 2026-05-18

US · 104.26.15.68 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: American Cancer Society Cancer Action Network | Home
Description: ACS CAN is the nation's leading cancer advocacy organization that is working every day to make cancer issues a national priority.
Language: en
Canonical: https://www.fightcancer.org/

Open Graph

url: https://www.fightcancer.org/
title: American Cancer Society Cancer Action Network
site name: American Cancer Society Cancer Action Network

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Adobe Fonts

Third-party hosts loaded (5)

cdn.cookielaw.org×1
cdnjs.cloudflare.com×1
use.typekit.net×1
www.googletagmanager.com×1
www.w3.org×1

Social

Contact

Phone

(202) 661-5700

Registration

Registrar

Network Solutions, LLC

Created

2002-05-19

Expires

2027-05-19 363 days left

Updated

2026-04-21

Name servers

abby.ns.cloudflare.com
sid.ns.cloudflare.com

DNS records live

NS

abby.ns.cloudflare.com
sid.ns.cloudflare.com

MX

10 smtp1-mke.securence.com
10 smtp1-msp.securence.com

TXT

linkedin-site-verification=64a6663a-afc8-4852-ba70-66c1154024fd

Verified for

Google
Meta

Email authentication partial

SPF: v=spf1 include:_spfprod.ngpvan.com include:spf-2248456.jmsend.com include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
softfail (~all)
DMARC: v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email,mailto:dmarc_fr@dmarc.everest.email; ruf=mailto:dmarc_agg@dmarc.everest.email; fo=1; rf=afrf
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-09 to 2026-08-07

Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.fightcancer.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src *.acscan.org *.fightcancer.org 'unsafe-inline'; script-src *.acscan.org *.fightcancer.org *.clarity.ms platform.twitter.com cdn.cookielaw.org cdn.fundraiseup.com www.googleoptimize.com www.google.com www.gstatic.com www.googletagmanager.com c.shpg.org static.fundraiseup.com static.tagboard.com cdn.everwall.com z.moatads.com cdn.addpipe.com script.crazyegg.com connect.facebook.net static.ads-twitter.com ajax.googleapis.com static.addtoany.com static.everyaction.com cdnjs.cloudflare.com js-agent.newrelic.com m.stripe.network acscan.turbovote.org assets.turbovote.org 'unsafe-inline' 'unsafe-eval'; style-src *.acscan.org *.fightcancer.org maxcdn.bootstrapcdn.com use.typekit.net p.typekit.net static.tagboard.com cdn.everwall.com script.crazyegg.com fonts.googleapis.com static.everyaction.com cdn.addpipe.com cdnjs.cloudflare.com 'unsafe-inline'; img-src cdn.cookielaw.org script.crazyegg.com data: *; media-src *.youtube.com *.addpipe.com 'self'; frame-src *.canva.com script.crazye
strict-transport-security: max-age=31536000; includeSubDomains; preload