opencollective.com

.com toplist crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 866 ms crawled 2026-05-18

US · 104.26.12.145 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Raise, manage and disburse money with full transparency. - Open Collective
Description: Open Collective is a legal and financial toolbox for groups. It’s a fundraising + legal status + money management platform for your community. What do you want to do?
Language: en

Open Graph

logo: /static/images/opencollectivelogo480x80@2x
title: Raise, manage and disburse money with full transparency.
description: Open Collective is a legal and financial toolbox for groups. It’s a fundraising + legal status + money management platform for your community. What do you want to do?

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Cloudflare Insights

Third-party hosts loaded (2)

opencollective-prod-api.herokuapp.com×2
static.cloudflareinsights.com×1

Social

Registration

Registrar

Cloudflare, Inc.

Created

2002-11-04

Expires

2026-11-04 168 days left

Updated

2025-10-05

Name servers

pablo.ns.cloudflare.com
roxy.ns.cloudflare.com

DNS records live

NS

pablo.ns.cloudflare.com
roxy.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=_UymNBodbgtmLPT63pJYFvyw1zO3bzLZEY-cLEVEGhs
google-site-verification=fW3mBFuNe4Az29d7aTmyeWfPtQqHwCgtV5PwsBxNHLw
google-site-verification=skhhgLqcdidjeO39qmJ0PIjb7wGY4LlUoNnpSVLf2bk

Email authentication strong

SPF

v=spf1 include:mailgun.org include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:a94f0f8bedd9462db42f2d5111dbd025@dmarc-reports.cloudflare.net

policy: quarantine

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-05-07 to 2026-08-05

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://opencollective.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: block-all-mixed-content; default-src 'self' https://cdn.plaid.com/; img-src 'self' https://images.opencollective.com https://next-images.opencollective.com https://pdf.opencollective.com data: *.paypal.com *.paypalobjects.com opencollective.com blog.opencollective.com blob: i.ytimg.com storage.googleapis.com cdn-logos.gocardless.com opencollective-production.s3.us-west-1.amazonaws.com opencollective-production.s3-us-west-1.amazonaws.com; worker-src 'self'; style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com; connect-src 'self' https://opencollective-prod-api.herokuapp.com https://pdf.opencollective.com https://rest.opencollective.com https://ml.opencollective.com https://oficollective.com wtfismyip.com *.paypal.com *.paypalobjects.com sentry.io *.sentry.io atlas.shopifycloud.com atlas.shopifysvc.com country-service.shopifycloud.com maps.googleapis.com https://wise.com https://transferwise.com https://sandbox.transferwise.tech h
strict-transport-security: max-age=31536000; includeSubDomains