indexo.dev

angelflightsoars.org

.org crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 1146 ms crawled 2026-06-02

US · 170.75.250.225 · AS393398 1515 ROUNDTABLE DR PROPERTY, LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Home
Generator
Sitefinity 11.0.6702.0 PE
Canonical
https://angelflightsoars.org

Technology

Server
Microsoft-IIS
ASP.NET
4.0.30319

Social

Contact

Email
Phone

Registration

Registrar
GoDaddy.com, LLC
Created
2007-08-01
Expires
2026-08-01 58 days left
Updated
2025-09-15
Name servers
  • ns25.domaincontrol.com
  • ns26.domaincontrol.com

DNS records live

NS
  • ns25.domaincontrol.com
  • ns26.domaincontrol.com
MX
  • 1 aspmx.l.google.com
  • 10 aspmx2.googlemail.com
  • 10 aspmx3.googlemail.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.apsmx.l.google.com
Verified for
  • Google
  • Microsoft 365

Email authentication partial

SPF
v=spf1 a ip4:170.75.250.230 include:_spf.google.com include:mailgun.org ~all
softfail (~all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

Go Daddy Secure Certificate Authority - G2
from 2025-11-22 to 2026-11-20
Expires in 170 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://angelflightsoars.org/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com ajax.googleapis.com www.google.com https://www.google.com https://www.gstatic.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; img-src 'self' maps.gstatic.com maps.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sp
strict-transport-security
max-age=31536000; includeSubDomains

Links to (5)

Linked from (1)