companyofstursula.org

.org crawl

First seen 2026-05-11 · Last seen 2026-05-17 · ok HTTP/1.1 200 8961 ms crawled 2026-05-17

US · 169.150.236.97 · AS60068 Datacamp Limited

Reputation 92/100 no dmarc policy

sector religion type homepage

HTML metadata

Title

Home | The Company of St Ursula

Description

Are you seeking something more?Are you seeking a spiritual path through our world?Are you eager for connections with like-minded women? The Company of St. Ursula in the United States invites you to make a Gospel difference in our world in a spiritual companionship and way of life shaped by

Language

en-US

Generator

All in One SEO (AIOSEO) 4.9.6.2

Canonical

https://companyofstursula.org/

Feeds

Technology

Server: BunnyCDN-IL1-1236
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (4)

cdn.elementor.com×2
app.icontact.com×1
gmpg.org×1
www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar

Domain-It!, Inc.

Created

2003-01-17

Expires

2027-01-17 242 days left

Updated

2025-12-22

Name servers

ns1.dreamhost.com
ns2.dreamhost.com
ns3.dreamhost.com

DNS records live

NS

ns1.dreamhost.com
ns2.dreamhost.com
ns3.dreamhost.com

MX

0 mx1.mailchannels.net
0 mx2.mailchannels.net

TXT

iContact1323654

Email authentication weak

SPF: v=spf1 mx include:netblocks.dreamhost.com include:relay.mailchannels.net -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-05-17 to 2026-08-15

Expires in 87 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://companyofstursula.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, no-referrer-when-downgrade
x-frame-options: sameorigin, SAMEORIGIN
permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
x-content-type-options: nosniff, nosniff
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;
strict-transport-security: max-age=31536000; includeSubDomains, max-age=31536000;