indexo.dev

firstbaptistbellingham.com

.com crawl

First seen 2026-05-20 · Last seen 2026-05-20 · ok HTTP/1.1 200 2313 ms crawled 2026-05-27

US · 52.27.136.6 · AS16509 Amazon.com, Inc.

Reputation 69/100 wrong cert dmarc monitor-only

Classifying

HTML metadata

Title
First Baptist Church, Bellingham | Welcome
Description
Inviting You To Experience The Empowering Love Of Jesus Christ. - Plan A Visit Get Involved

Open Graph

url
http://firstbaptistbellingham.com/
title
First Baptist Church, Bellingham | Welcome
description
Inviting You To Experience The Empowering Love Of Jesus Christ. - Plan A Visit Get Involved

Technology

Server
nginx
Analytics
  • Google Tag Manager

Third-party hosts loaded (4)

  • assets.cloversites.com×4
  • cdn.cloversites.com×4
  • cdnjs.cloudflare.com×1
  • www.googletagmanager.com×1

Social

Contact

Email

Registration

Registrar
NameCheap, Inc.
Created
2004-10-17
Expires
2026-10-17 138 days left
Updated
2025-09-17
Name servers
  • dns1.registrar-servers.com
  • dns2.registrar-servers.com

DNS records live

NS
  • dns1.registrar-servers.com
  • dns2.registrar-servers.com
MX
  • 1 aspmx.l.google.com
  • 10 aspmx2.googlemail.com
  • 10 aspmx3.googlemail.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com

Email authentication weak

SPF
not published
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed

Certificate (current) wrong cert

DigiCert Global G2 TLS RSA SHA256 2020 CA1
from 2025-09-22 to 2026-09-22
Expires in 113 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked over plain HTTP: http://firstbaptistbellingham.com/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • checked over plain HTTP
  • CSP uses wildcard sources
  • weak frame protection
Header values
referrer-policy
strict-origin
x-frame-options
ALLOWALL, ALLOW-FROM https://greenhouse.cloversites.com
permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), speaker-selection=(), sync-xhr=(), usb=(), vr=()
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self' *.cloversites.com

Links to (5)

Linked from (1)