freedom.press

.press user

First seen 2026-05-15 · Last seen 2026-05-15 · ok HTTP/1.1 200 2563 ms crawled 2026-05-15

US · 104.20.42.206 · AS13335 Cloudflare, Inc.

Reputation 100/100

sector nonprofit type homepage

HTML metadata

Title: Freedom of the Press Foundation
Description: Defending press freedom for the next generation
Language: en

Open Graph

url: https://freedom.press/
title: Freedom of the Press Foundation
site name: Freedom of the Press
description: Defending press freedom for the next generation

Technology

CDN: Cloudflare
CMS: Gatsby

Third-party hosts loaded (2)

media.freedom.press×11
analytics.freedom.press×1

Social

Registration

Registrar

Gandi SAS

Created

2014-09-23

Expires

2026-09-23 126 days left

Updated

2025-10-15

Name servers

aaden.ns.cloudflare.com
carol.ns.cloudflare.com

DNS records live

NS

aaden.ns.cloudflare.com
carol.ns.cloudflare.com

MX

10 in1-smtp.messagingengine.com
20 in2-smtp.messagingengine.com

TXT

Show 5 TXT records

4c9ba593d977b0aedef401cd3a59a699
brave-ledger-verification=7e83dc20d6e1a2b8f647bb27ce541ab057a75463faf087ff026de06d5cf6eb83
google-site-verification=5kEgWZVwlBljfQ-Z5KcHDUotnPEZU-WhtM9KpXnSn9M
google-site-verification=pfPquNdAcFKd3mBencMmIBI0DhtNzBX_PHpbp-jcajE
linkedin-site-verification=9e9695d2-7fcf-4289-b6a8-3438e51d5e67

Email authentication strong

SPF

v=spf1 include:spf.messagingengine.com include:mailgun.org include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:af07ee83@mxtoolbox.dmarc-report.com; ruf=mailto:af07ee83@forensics.dmarc-report.com; pct=50

policy: quarantine · pct=50

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXyttfBwXbzgbkw/xLl3WM0XOOmxw6sTLrgzKOu7iW825IGsgkGf9aSnO39bzx4Wt/sFLH2WZyY59a…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-04-24 to 2026-07-23

Expires in 64 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://freedom.press/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: manifest-src 'self' https://freedomofpress.cloudflareaccess.com; base-uri 'self'; frame-src 'self' blob: https://www.google.com/ https://checkout.stripe.com https://platform.twitter.com https://syndication.twitter.com https://www.youtube.com https://www.youtube-nocookie.com https://commerce.coinbase.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://checkout.stripe.com https://analytics.freedom.press https://platform.twitter.com https://cdn.syndication.twimg.com https://cdn.jsdelivr.net https://api.observablehq.com https://bundle.run https://commerce.coinbase.com/ https://scripts.teamtailor-cdn.com; default-src 'self'; connect-src 'self' https://analytics.freedom.press https://checkout.stripe.com https://cdn.jsdelivr.net https://pressfreedomtracker.us https://comments-api-fpf.fftf.app https://callpower-fpf.fftf.app https://api.na.teamtailor.com https://releases.wagtail.org/ https://media.freedom.press; obje
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin