indexo.dev

aquarium.org

.org crawl

First seen 2026-04-15 · Last seen 2026-05-15 · ok HTTP/1.1 200 883 ms crawled 2026-05-11

US · 192.124.249.4 · AS30148 Sucuri

Reputation 94/100 dmarc monitor-only

Classifying

Technology

CDN
Cloudflare
Server
Sucuri

Registration

Registrar
GoDaddy.com, LLC
Created
1995-06-12
Expires
2027-06-11 387 days left
Updated
2025-07-26
Name servers
  • ns1.wavedns.net
  • ns2.wavedns.net

DNS records live

NS
  • ns1.waveip.org
  • ns2.waveip.org
  • ns3.waveip.org
  • ns4.waveip.org
MX
  • 0 aquarium-org.mail.protection.outlook.com
TXT
Show 6 TXT records
  • e2ma-verification=mhkbb
  • sophos-domain-verification=4dd5e1fd656459d60c0808cde75c70db70fd95cb
  • MS=ms86253066
  • MS=066A2B816905659DD17562989FD358ACBF8405B6
  • sophos-domain-verification=bd0514c4822b2f1a5ce69f35f8def3371d37eee34c05633080cab279d31de570
  • M1pWEiAi7/tjvqdLXKeOymrPRMrA7Rwg2RDeB4bsJWzk3y6I9XjUheH6Ah11asmSX3ACIkMcCeRn9p8CHaY7XA==

Email authentication partial

SPF
v=spf1 ip4:107.190.210.155 ip4:107.190.210.150 include:spf.protection.outlook.com include:_spf.prod.hydra.sophos.com include:_spf.wpcloud.com include:_spf.e2ma.net -all
strict (-all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoOHPrTvnMsXFQIFXfZw+6U3RFRgycRklrcI0AdRzPiufJbhX8ho7eOI46/XMdwzxr8IbcPK76/hpz…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+O6m8sszD721LB+lT5JBvui0MbaOUcskXIgrgZrqXBtPDFOn6JgIKHc+93M4BSy2HhlOLsyXO341G…
selectors probed

Certificate (current)

Starfield Secure Certificate Authority - G2
from 2026-03-22 to 2026-06-20
Expires in 32 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://aquarium.org/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
upgrade-insecure-requests;, script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.hdrelay.com https://hdrelay.com https://app.e2ma.net https://*.e2ma.net https://calendar.google.com https://maps.google.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.tideschart.com/ https://www.blackbaudhosting.com https://*.blackbaudhosting.com https://*.blackbaudcdn.net https://sky.blackbaudcdn.net https://host.nxt.blackbaud.com/ https://payments.blackbaud.com/ https://app2.planningpod.com/ https://d1vpukrd9uvxxk.cloudfront.net/ https://*.planningpod.com/ https://*.cloudfront.net/ https://cdnjs.cloudflare.com/; img-src 'self' data: blob: https://*.hdrelay.com https://hdrelay.com https://app.e2ma.net https://*.e2ma.net https://calendar.google.com https://maps.google.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.tideschart.com/ https://www.blackbaudhosting.com https://*.blackbaudhosting.com https://*.blackbaudcdn.net h

Linked from (2)