rainforest-alliance.org

HTML metadata

Title

Rainforest Alliance | Creating a Better World for People and Nature

Description

When you choose products with the Rainforest Alliance little green frog, you’re supporting a better world for people and nature.

Language

en-US

Generator

WPML ver:4.9.2.1 stt:60,38,1,4,3,25,27,28,43,2,54,58;

Canonical

https://www.rainforest-alliance.org/

Translations

de
en
es
fr
id
ja
pt

Open Graph

url: https://www.rainforest-alliance.org/
title: Rainforest Alliance
locale: en_US
site name: Rainforest Alliance
description: When you choose products with the Rainforest Alliance little green frog, you’re supporting a better world for people and nature.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (7)

kit.fontawesome.com×2
platform-api.sharethis.com×2
www.google.com×2
doublethedonation.com×1
giving.classy.org×1
policy.app.cookieinformation.com×1
www.googletagmanager.com×1

Social

Contact

Phone

Address

st Alliance is a 501(c)(3) Nonprofit registered in the US under EIN: 13-33778

Registration

Registrar

Tucows Domains Inc.

Created

1996-04-12

Expires

2027-04-13 327 days left

Updated

2026-04-17

Name servers

asa.ns.cloudflare.com
toby.ns.cloudflare.com

DNS records live

NS

asa.ns.cloudflare.com
toby.ns.cloudflare.com

MX

33 route1.mx.cloudflare.net
37 route3.mx.cloudflare.net
81 route2.mx.cloudflare.net

TXT

pardot869601=bf83d780beb720988a07de437e65e85ac39a0d0e828234e38125c48c451d3da1
pardot869601=ceab66935f1599c899f7d8d5972be1e883b54370aae6dd7cda7a54b6f298e252

Verified for

Google

Email authentication strong

SPF: v=spf1 include:_spf.mx.cloudflare.net ~all
softfail (~all)
DMARC: v=DMARC1;p=quarantine
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-03-23 to 2026-06-21

Expires in 32 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.rainforest-alliance.org/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin
permissions-policy: geolocation=(self), microphone=(), camera=(), fullscreen=(self), accelerometer=(), gyroscope=(), magnetometer=(), payment=(self), usb=(), ambient-light-sensor=(), serial=(), bluetooth=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; style-src 'self' *.arcgis.co *.freshchat.com *.typeform.com *.bootstrapcdn.com *.doublethedonation.com doublethedonation.com *.chatbot.com 'unsafe-inline' *.google.com *.google.ca *.googleapis.com; script-src 'self' *.gstatic.com *.issuu.com *.fw-cdn.com *.freshchat.com *.fontawesome.com *.arcgis.co *.createjs.com *.typeform.com *.chatbot.co *.facebook.net *.bing.com youtube.com *.youtube.com *.pardot.com *.licdn.com *.cookieinformation.com *.classy.org *.gofundme.com *.googletagmanager.com *.google-analytics.com *.doublethedonation.com doublethedonation.com *.newrelic.com *.sharethis.com *.googleoptimize.com *.rainforest-alliance.org *.google.com *.google.ca *.gstatic.co *.gstatic.com *.chatbot.com 'unsafe-inline' *.googleadservices.com *.doubleclick.net 'unsafe-eval'; img-src 'self' rainforest-alliance.org *.rainforest-alliance.org rainforest-alliance.org *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.sharethis.com *.bin
strict-transport-security: max-age=31536000; includeSubDomains; preload