indexo.dev

cityofwinters.org

.org crawl

First seen 2026-04-21 · Last seen 2026-05-15 · ok HTTP/1.1 200 1832 ms crawled 2026-05-15

US · 207.38.78.221 · AS36489 IP Pathways, LLC

Reputation 100/100

Classifying

HTML metadata

Title
Winters, CA | Official Website
Language
en

Technology

Third-party hosts loaded (1)

  • docaccess.com×1

Social

Contact

Phone

Registration

Registrar
Network Solutions, LLC
Created
2000-04-06
Expires
2028-04-06 687 days left
Updated
2023-02-10
Name servers
  • ns1.bdm.microsoftonline.com
  • ns2.bdm.microsoftonline.com
  • ns3.bdm.microsoftonline.com
  • ns4.bdm.microsoftonline.com

DNS records live

NS
  • ns1.bdm.microsoftonline.com
  • ns2.bdm.microsoftonline.com
  • ns3.bdm.microsoftonline.com
  • ns4.bdm.microsoftonline.com
MX
  • 0 cityofwinters-org.mail.protection.outlook.com
TXT
  • mscid=I7jNuSsEL3bisXkMPhdnQsJZ+yVPK66EiDpkaWGE3/vb34X0RsFAITj9cvgXGq2enpJOT1PZzt4df8etZIqIuQ==

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@cityofwinters.org
policy: reject (enforced)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDtE8ANrERUhi+Wh9J9ayNpYuiqDtGBWmiCZMNZGj/y7Y4JAzJa5A9ZelTul/xU8n4zSk6AknPit15uetosbY…
selectors probed

Certificate (current)

R12
from 2026-05-01 to 2026-07-30
Expires in 72 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://cityofwinters.org/

present
  • content-security-policy
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *

Links to (8)

Linked from (2)