myfreetaxes.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-15 · ok HTTP/1.1 200 1464 ms crawled 2026-05-07

US · 107.20.53.2 · AS14618 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

sector nonprofit type homepage

HTML metadata

Title: MyFreeTaxes by United Way | MyFreeTaxes
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://myfreetaxes.com/

Technology

Server: Apache
CMS: Drupal

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

c.la1-c1-ph2.salesforceliveagent.com×1
fonts.googleapis.com×1
service.force.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2009-01-21

Expires

2027-01-21 246 days left

Updated

2026-01-17

Name servers

ns-1488.awsdns-58.org
ns-2045.awsdns-63.co.uk
ns-320.awsdns-40.com
ns-790.awsdns-34.net

DNS records live

NS

ns-1488.awsdns-58.org
ns-2045.awsdns-63.co.uk
ns-320.awsdns-40.com
ns-790.awsdns-34.net

MX

10 d323665a.ess.barracudanetworks.com
20 d323665b.ess.barracudanetworks.com

TXT

_globalsign-domain-verification=PO95qR5HARP3zbvcQ1WFBVyLGBUvgjmgc16ENjCtmy
_globalsign-domain-verification=Iiihy-iv_vLdlIMtHvh-aCdqO2T53oCoknhW44njXn

Email authentication strong

SPF: v=spf1 a mx include:amazonses.com include:spf1.unitedway.org include:spf2.unitedway.org include:spf3.unitedway.org include:spf4.unitedway.org ~all
softfail (~all)
DMARC: v=DMARC1;p=none;sp=none;pct=100;adkim=r;aspf=r;ri=86400;fo=0:1:d:s
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04

from 2025-07-12 to 2026-08-11

Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://myfreetaxes.com/

present

strict-transport-security
x-frame-options
x-content-type-options

findings

missing Content Security Policy
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload