tfh.org

.org crawl

First seen 2026-04-20 · Last seen 2026-05-16 · ok HTTP/1.1 200 1902 ms crawled 2026-05-13

US · 172.67.69.76 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: The Father's House Church | Vacaville, Napa, Concord, and Roseville, CA
Description: The Father's House Church in Vacaville, Napa, Concord, and Roseville, California is all about people encountering the reality of God.
Language: en
Canonical: https://tfh.org/

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (6)

cdn.jsdelivr.net×3
cdnjs.cloudflare.com×2
kit.fontawesome.com×1
use.typekit.net×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Moniker Online Services LLC

Created

2001-08-08

Expires

2026-08-08 80 days left

Updated

2026-02-22

Name servers

dale.ns.cloudflare.com
karina.ns.cloudflare.com

DNS records live

NS

dale.ns.cloudflare.com
karina.ns.cloudflare.com

MX

0 tfh-org.mail.protection.outlook.com

TXT

Show 6 TXT records

google-site-verification=vuBW3oeN7Ii87KaZM8_aXENpmEolBdhT1_-edt9raNU
mandrill_verify.gb0EFNyN1BCqX3pa3_WB-Q
proxy-ssl.webflow.com
MS=ms56390344
apple-domain-verification=3vIRa0F-OC0v9aqAd0FBzI7ASGuo7FueRVR2Lc1Cc2E
apple-domain-verification=XFBGJ2kfgVvHaXVf

Email authentication strong

SPF

v=spf1 redirect=tfh.org.hosted.spf-report.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;pct=50;rua=mailto:006a8141@mxtoolbox.dmarc-report.com,mailto:dmarc@tfh.org;ruf=mailto:006a8141@forensics.dmarc-report.com

policy: reject (enforced) · pct=50

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5l503oBI4hmF+Alfbfrvob/0JgSHxmiYnEF+Tl91ag0AvBDpzCQtuBcTBiovU19xZi4a2fmwOVdCL8dYjWB…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG2IabwJzsvDSDqo1TuZLXAMd6UjojOMepGKl7UsBfgbeX2JyQahZquWM0NQLqzB/LouS57OLqb0jN…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5FDSN+Auo55OgNA/r/UIf+tVpfm+7ARun1DTsFa4/iLN8wF18pOzgJx5zaP1LmNtwK5lw7xGTkoPfAio7…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+lZuFXlxxe9due3TlrF3nuKeUykJ0APr9M8qszvQEK1ZtsuBgYHIKisvUDCAUoR68Ewu1kPrgR4J8NN+bxb4/A3…

selectors probed

Certificate (current)

WE1

from 2026-04-10 to 2026-07-09

Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.tfh.org/

present

x-content-type-options
referrer-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff