indexo.dev

bostonfed.org

.org crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1115 ms crawled 2026-05-19

FR · 80.239.150.90 · AS1299 Arelion Sweden AB

Reputation 100/100

Classifying

HTML metadata

Title
Home - Federal Reserve Bank of Boston
Description
The Boston Fed works to promote sound growth and financial stability in New England and the nation.
Language
en
Canonical
https://www.bostonfed.org
Feeds

Open Graph

title
Home
site name
Federal Reserve Bank of Boston
description
The Boston Fed works to promote sound growth and financial stability in New England and the nation.

Technology

CDN
Akamai
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.googleapis.com×1
  • www.googletagmanager.com×1

Social

Contact

Phone
Address
600 Atlantic AvenueBoston, MA 02210-2204map(617) 973-3000

Registration

Registrar
GoDaddy.com, LLC
Created
2009-06-13
Expires
2026-06-13 24 days left
Updated
2025-07-28
Name servers
  • pdns108.ultradns.org
  • pdns108.ultradns.biz
  • pdns108.ultradns.com
  • pdns108.ultradns.net
  • ns60.ultradns2.org
  • ns60.ultradns2.com

DNS records live

NS
  • ns60.ultradns2.com
  • ns60.ultradns2.org
  • pdns108.ultradns.biz
  • pdns108.ultradns.com
  • pdns108.ultradns.net
  • pdns108.ultradns.org
TXT
Show 5 TXT records
  • _9121tzp2jml1wq04qfnz7jyaiwb0j3n
  • _r765x674zo225u6ulk4l9jwuq7yz7n3
  • Wv8fMbevj30j6JfiGlALKVbmhJ4:8AAA-8DD7-7C6A-211D-9BF4-0FCF-16C8-2DE0
  • _pki-validation.bostonfed.org 5B56-9C03-0387-FFC8-833A-2C25-C603-5687
  • CS0008432

Email authentication no MX

SPF
v=spf1 ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; rua=mailto:dmarcreporting@frb.org
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-05-15 to 2026-08-13
Expires in 86 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.bostonfed.org/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
Header values
permissions-policy
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), interest-cohort=(), serial=()
x-content-type-options
nosniff
content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.applicationinsights.io *.google-analytics.com *.googletagmanager.com *.surveymonkey.com *.threatpulse.net *.youtube.com *.libsyn.com *.facebook.net *.facebook.com *.fbcdn.net *.tableau.com app.icontact.com *.twitter.com *.ws.frb.org *.frswebservices.org *.bostonfed.org bostonfed *.gstatic.com *.taleo.net *.google.com *.highcharts.com *.brightcove.net *.brightcove.com *.ytimg.com *.federalreserve.org *.appserviceenvironment.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.applicationinsights.io *.google-analytics.com *.googletagmanager.com *.surveymonkey.com *.threatpulse.net *.youtube.com *.libsyn.com *.facebook.net *.facebook.com *.fbcdn.net *.tableau.com app.icontact.com *.twitter.com *.ws.frb.org *.frswebservices.org *.bostonfed.org bostonfed *.gstatic.com *.taleo.net *.google.com *.highcharts.com cdn.syndication.twimg.com *.googleapis.com *.appserviceenvironment.net; style-src 'self' 'unsafe-inline' https:
strict-transport-security
max-age=31536000 ; includeSubDomains
cross-origin-opener-policy
same-origin, same-origin
cross-origin-resource-policy
same-origin, same-origin

Links to (6)

Linked from (2)