indexo.dev

cityofavon.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-06 · ok HTTP/1.1 200 1206 ms crawled 2026-05-06

US · 208.90.189.123 · AS36489 IP Pathways, LLC

Reputation 97/100 dmarc monitor-only

Classifying

HTML metadata

Title
Avon OH | Official Website
Language
en

Technology

Server
Microsoft-IIS

Third-party hosts loaded (1)

  • docaccess.com×1

Social

Contact

Phone

Registration

Registrar
Network Solutions, LLC
Created
1999-03-08
Expires
2034-03-08 2849 days left
Updated
2024-03-08
Name servers
  • dns1.civicplus.com
  • dns2.civicplus.com

DNS records live

NS
  • dns1.civicplus.com
  • dns2.civicplus.com
MX
  • 10 mxa-009a6001.gslb.pphosted.com
  • 10 mxb-009a6001.gslb.pphosted.com
TXT
Show 7 TXT records
  • v8fd2sp6vadgrr89867n79p088
  • wombat-verification=3KwxVCQV1HEp-aRXRTKKaZ5G0frhk
  • MS=EA03E0A9E8A803BAFDEB5448E5990F893BFE7682
  • MS=ms72846167
  • apple-domain-verification=KSY6J4bWm0pbWynI
  • q4cimevbp31l381tmo7ik1jd0b
  • tljaap6n4qb3cte0rjilmpvni3

Email authentication strong

SPF
v=spf1 include:emailus.freshservice.com include:spf.protection.outlook.com include:spf-009a6001.pphosted.com -all
strict (-all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-03-16 to 2026-06-14
Expires in 26 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://cityofavon.com/

present
  • content-security-policy
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *

Links to (4)

Linked from (1)