givingtools.com

HTML metadata

Title: GivingTools Online Donation Platform
Description: GivingTools online giving is a beautifully designed, highly secure, inexpensive online fundraising platform. Flat-rate ACH gifts for just 25¢. Credit card rates as low as 2.2% via your Stripe or PayPal account. One-time and recurring gifts. Donor-paid fees. Try a free demo account in minutes.
Language: en

Open Graph

url: https://givingtools.com/
title: GivingTools Online Donation Platform
description: GivingTools online giving is a beautifully designed, highly secure, inexpensive online fundraising platform. Flat-rate ACH gifts for just 25¢. Credit card rates as low as 2.2% via your Stripe or PayPal account. One-time and recurring gifts. Donor-paid fees. Try a free demo account in minutes.

Technology

CDN: Vercel
CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (2)

givingtools-cdn-worker.chris-2e7.workers.dev×1
www.googletagmanager.com×1

Social

Contact

Email

hello@givingtools.com

Registration

Registrar

GoDaddy.com, LLC

Created

2012-03-11

Expires

2029-03-11 1026 days left

Updated

2024-10-16

Name servers

ns1.digitalocean.com
ns2.digitalocean.com
ns3.digitalocean.com

DNS records live

NS

ns1.digitalocean.com
ns2.digitalocean.com
ns3.digitalocean.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 4 TXT records

_globalsign-domain-verification=n4X8YIEN_vGdY_EnODcbMjJg_XYlHdSO3mYa2xyM3D
google-site-verification=H9wkumglrVyfl3B_npnyAmnUIaTAVZwqCdJBR1lLan8
_globalsign-domain-verification=ztx2E0krQQq_i7N9VM8s8jugSRe1WobvEGDPzVMFcA
google-site-verification=r-wLxkKPMPRISRXMz2LR-qW8F0gpFLGyiUZcYzlqP6E

Email authentication strong

SPF

v=spf1 include:servers.mcsv.net include:_spf.google.com ?all

neutral (?all)

DMARC

v=DMARC1; p=quarantine

policy: quarantine

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfj6FfN3oVWaZC7gaJXl2kwtv3YMXW4/E7n0KEQIfKJMk8fSsdgzFivkdFAE1t9tFJNO5ZV2nvPLTe…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Yo8j81M/OAenpspfo48uEHiXRLBHO6wk2REWw4fVW3jcCTxzXqM8fk9M0UjRl33Rbz8XTjwHULN0Rt47…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfxae7T8R/WpJdljV2VuH0iVLaHHc6zOUyqjdQQoHbMI5FW2kxIMVkDM9gvpvIKVa7qcp8PoUkbR8eju7T…

selectors probed

Certificate (current)

R13

from 2026-05-03 to 2026-08-01

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://givingtools.com/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
weak frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: allowall
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: default-src 'none' ;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.gstatic.com https://www.google.com https://rec.smartlook.com https://rec2.smartlook.com https://connect.facebook.net https://www.google-analytics.com https://browser-update.org https://code.jquery.com https://a.quora.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://js.stripe.com ;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ;img-src 'self' data: https://www.givingtools.com * https://objects.givingtools.com https://www.google.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com ;font-src 'self' https://fonts.gstatic.com ;connect-src https://api.givingtools.com https://givingtools.com https://blog.givingtools.com https://api.pwnedpasswords.com https://api.ipstack.com https://writer-us.smartlook.com https://s2.smartlook.com https://manager.smartlook.com https://cdn.jsdelivr.net https

Links to (1)

facebook.com×2