indexo.dev

16thstreetbaptist.org

.org crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 8308 ms crawled 2026-05-17

US · 104.21.74.88 · AS13335 Cloudflare, Inc.

Reputation 79/100 weak security headers permissive spf dmarc monitor-only

Classifying

HTML metadata

Title
16th Street Baptist Church | Where Jesus Christ is the main attraction!
Description
16th Street Baptist Church is a Civil Rights historical site and an active place of worship located in Birmingham, Alabama.
Language
en
Generator
WordPress 6.9.4
Canonical
https://www.16thstreetbaptist.org/
Feeds

Open Graph

url
https://www.16thstreetbaptist.org/
title
16th Street Baptist Church | Where Jesus Christ is the main attraction!
locale
en_US
site name
16th Street Baptist Church
description
16th Street Baptist Church is a Civil Rights historical site and an active place of worship located in Birmingham, Alabama.

Technology

CDN
Cloudflare
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Adobe Fonts
  • Font Awesome

Third-party hosts loaded (4)

  • use.fontawesome.com×2
  • gmpg.org×1
  • use.typekit.net×1
  • www.googletagmanager.com×1

Social

Contact

Phone
Address
Street Baptist Church", "image": "", "address": "1530

Registration

Registrar
GoDaddy.com, LLC
Created
2009-02-09
Expires
2028-02-09 629 days left
Updated
2026-03-26
Name servers
  • courtney.ns.cloudflare.com
  • remy.ns.cloudflare.com

DNS records live

NS
  • courtney.ns.cloudflare.com
  • remy.ns.cloudflare.com
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • v=verifydomain MS=6205877
  • NETORGFT7344173.onmicrosoft.com
Verified for
  • Google

Email authentication weak

SPF
v=spf1 include:dc-aa8e722993._spfm.16thstreetbaptist.org v=spf1 include:_spf.google.com ~all~all
permissive (+all) — anyone can send as this domain
DMARC
v=DMARC1; p=none; fo=1; rua=mailto:info@16thstreetbaptist.org
policy: none (monitoring only)
DKIM
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJocCQP3WsdDEjGzF6z/xARRjG+cZBSEchwGCy+sQXA5KzRXCmquaKYlJ/Ni25zo5FtHA7/Gj+xs/M…
selectors probed

Certificate (current)

E8
from 2026-03-19 to 2026-06-17
Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.16thstreetbaptist.org/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (6)

Linked from (1)