indexo.dev

academicprogramsonline.org

.org crawl

First seen 2026-04-14 · Last seen 2026-05-06 · ok HTTP/1.1 200 711 ms crawled 2026-05-08

US · 152.3.99.226 · AS13371 Duke University

Reputation 100/100

Classifying

HTML metadata

Title
Academic Programs Online
Description
Full service online faculty recruitment and application management system for academic institutions worldwide. We offer unique solutions tailored for academic communities.
Language
en
Canonical
https://academicprogramsonline.org/ajo
Feeds

Technology

Server
Apache

Social

Registration

Registrar
SafeNames Ltd.
Created
2017-06-07
Expires
2026-06-07 17 days left
Updated
2024-07-22
Name servers
  • dns-auth-01.oit.duke.edu
  • dns-auth-02.oit.duke.edu
  • dns-nc1-01.oit.duke.edu

DNS records live

NS
  • dns-auth-01.oit.duke.edu
  • dns-auth-02.oit.duke.edu
  • dns-nc1-01.oit.duke.edu
MX
  • 10 academicprogramsonline-org.mail.protection.outlook.com
TXT
  • 0ed1fe018a0e34fbdbe7dc4321aeaec0e9e8e67a01
Verified for
  • Microsoft 365

Email authentication strong

SPF
v=spf1 a mx include:_spf.google.com ip4:152.3.99.226 ip4:152.3.96.162 ip4:152.3.189.224/27 include:us._netblocks.mimecast.com ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email
policy: quarantine
DKIM
  • default: v=DKIM1;k=rsa;s=email;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8bMIvqb7iqnD50nybMaGWzgaG5YNH7LbXVgOBiW/f34qXwLa25u+yKtdcwkksorpbyKbKT66JZez3…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0KDAkhb7kXL9xLW9VWmH8r3ITp3wH3L4rThvi3Z/e4qo5b1ZiTyhcuYtAQm8OQdsoHLrPDAmC+i5y…
selectors probed

Certificate (current)

InCommon RSA Server CA 2
from 2026-04-27 to 2026-11-12
Expires in 175 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://academicprogramsonline.org/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
Header values
x-frame-options
sameorigin
permissions-policy
camera=(), microphone=()
x-content-type-options
nosniff
content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googleapis.com *.gstatic.com; img-src * data: image/svg+xml; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; media-src 'self' data:
strict-transport-security
max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy
same-origin
cross-origin-resource-policy
same-origin

Links to (2)

Linked from (1)