oceanfdn.org
FThe Ocean Foundation | Ocean Conservation & Philanthropy
The Ocean Foundation is the only community foundation for the ocean, dedicated to improving global ocean health, climate resilience, and the blue economy.
Last scanned 51 min agoCompare with another site →
Built with
- CMS
- WordPress
Also detected
- Libraries
- jQuery
- Infrastructure
- Cloudflare · WP Engine
- Third-party services
- Facebook Pixel · Google Analytics · Google Tag Manager · Hotjar · Microsoft Clarity
Overview
- Status
- alive
- Registered
- 2003-03-21 (24 years ago)
- First seen here
- 2026-09-22
- Security grade
- F (50/100, from headers & TLS)
- Privacy score
- 38/100 (4 third-party script hosts, 5 tracking/marketing services)
- Hosting
- Cloudflare, Inc. · AS13335 · Canada
- Server header
cloudflare- Response time
- 114 ms to first byte, measured from our crawler
- TLS certificate
- Let's Encrypt · TLSv1.3 · expires 2026-10-29
- Language
- en-us
- Mobile-ready
- yes (viewport meta tag)
- RSS / Atom feed
- yes
- Structured data
- WebPage · ImageObject · BreadcrumbList · WebSite · Organization · ImageGallery
- Linked to from
- 11 other sites seen so far
Loads scripts from
Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.
What to fix
- Add Strict-Transport-Security
Header: Strict-Transport-Security: max-age=31536000; includeSubDomains - Add a Content-Security-Policy
Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test. - Add X-Content-Type-Options
Header: X-Content-Type-Options: nosniff - Add a Referrer-Policy
Header: Referrer-Policy: strict-origin-when-cross-origin
Security & email signals
- ✓ HTTPS
- ✗ HSTS
- ✗ Content-Security-Policy
- ✗ X-Content-Type-Options
- ✓ X-Frame-Options
- ✗ Referrer-Policy
- ✗ Permissions-Policy
- ✓ SPF record
- ✓ DMARC record
- ✗ DKIM record
- ✓ Cookies set securely
- ✓ Has real content (not an empty shell)
- ✓ Valid TLS certificate
Badge
Show this site's security grade in a README or footer:
<a href="https://webtelemetry.dev/site/oceanfdn.org"><img src="https://webtelemetry.dev/badge/oceanfdn.org.svg" alt="Security grade"></a>
Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.