mozillafoundation.org

HTML metadata

Title: Welcome to Mozilla Foundation - Mozilla Foundation
Description: With over two decades of global impact, Mozilla Foundation continues to lead the movement for a better technology future—powered by people, open by design, and fueled by imagination.
Language: en

Open Graph

url: https://www.mozillafoundation.org/en/
title: Welcome to Mozilla Foundation
site name: Mozilla Foundation
description: With over two decades of global impact, Mozilla Foundation continues to lead the movement for a better technology future—powered by people, open by design, and fueled by imagination.

Technology

CDN: Cloudflare
CMS: Gatsby

Cookie consent

OneTrust

Third-party hosts loaded (2)

assets.mofoprod.net×27
cdn.cookielaw.org×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

2003-07-09

Expires

2027-07-09 414 days left

Updated

2025-06-12

Name servers

micah.ns.cloudflare.com
roxy.ns.cloudflare.com

DNS records live

NS

micah.ns.cloudflare.com
roxy.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

3a91a40c78954ec7ad7b466f551e68958441d7c2ac5faf14af2edc72f10baeba
_asm9jx111ssvvfm0n6yq0j6e3h8pf6a

Verified for

Anthropic
Atlassian
Canva
DocuSign
Google
Microsoft 365
OpenAI
Remote

Email authentication strong

SPF

v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:spf.fundraiseup.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email,mailto:dmarc@mozilla.com

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDc8xSXVkv6CUWak0+e4zNEdjzo+uKft/+HkJoXIAULSxhyDXGe67iW0RE8f4qU7kRXmLvkvSbbwtOWUJ7Gib…
k1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAQr1VYOh7921kbLpMVAZrbiyN5Pn+Jtfli60GEBKJWeUzZHcIH75eMOBDtZDpsXKheXLJoNc5yhFuj86OEd…

selectors probed

Certificate (current)

WE1

from 2026-04-13 to 2026-07-12

Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.mozillafoundation.org/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: img-src * data: blob: https://*.fundraiseup.com https://ucarecdn.com https://pay.google.com https://*.paypalobjects.com; style-src 'self' 'unsafe-inline' https://code.cdn.mozilla.net https://fonts.googleapis.com https://tagmanager.google.com https://platform.twitter.com https://assets.mofoprod.net/static/ https://cdn.commento.io/css/commento.css https://www.googletagmanager.com/debug/badge.css https://js.tito.io https://cdnjs.cloudflare.com/ajax/libs/gsap/3.8.0/gsap.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/3.8.0/ScrollTrigger.min.js https://mozillafoundation.tfaforms.net https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css; default-src 'none'; script-src 'self' 'unsafe-inline' *.paypalobjects.com https://www.google-analytics.com/analytics.js http://*.shpg.org/ https://comments.mozillafoundation.org/ https://airtable.com https://platform.twitter.com https://cdn.syndication.twimg.com https://assets.mofoprod.net/static/ https://embed.typeform.com https:
strict-transport-security: max-age=16070400; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups