indexo.dev

cliftonnj.org

.org crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 2324 ms crawled 2026-05-18

US · 207.38.74.242 · AS36489 IP Pathways, LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Clifton, NJ | Official Website
Language
en

Technology

Server
Microsoft-IIS

Third-party hosts loaded (2)

  • answers-script.frase.io×1
  • docaccess.com×1

Social

Contact

Phone

Registration

Registrar
Network Solutions, LLC
Created
2002-04-26
Expires
2033-04-26 2533 days left
Updated
2023-05-01
Name servers
  • ns23.worldnic.com
  • ns24.worldnic.com

DNS records live

NS
  • ns23.worldnic.com
  • ns24.worldnic.com
MX
  • 20 mail1.cliftonnj.org
  • 40 scan.precisioncomputer.com
TXT
Show 5 TXT records
  • da86vq4rvgpp6b8uopq8pbdrhp
  • duo_sso_verification=3S4JRlb4sjQrPQmYy2d0sMeeN3XOhg29TNWPrP9nBzQyxgjY9PIzSF4u3RL1lkNs
  • j0Hmq1S35PCTjP4O1EZUfwxP6csjGeQG/5r6bM+KFhihQupikjaJRS9YRcAB+J1igwd8iOl8gPjf+tiHXr7Nag==
  • apple-domain-verification=5qUvpy8ylsbGIFD5
  • MS=ms53020050

Email authentication partial

SPF
v=spf1 a:mail1.cliftonnj.org -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:administrator@cliftonnj.org; fo=1; pct=100
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-05-17 to 2026-08-15
Expires in 87 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://cliftonnj.org/

present
  • content-security-policy
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *

Links to (11)

Linked from (1)