indexo.dev

fmsc.org

.org crawl

First seen 2026-04-15 · Last seen 2026-05-13 · ok HTTP/1.1 200 5574 ms crawled 2026-05-10

US · 52.173.132.158 · AS8075 Microsoft Corporation

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Feed My Starving Children | Volunteer to pack meals
Description
Feed My Starving Children is a nonprofit organization empowering volunteers to pack meals for the malnourished in nearly 70 countries, hungry in body and spirit.
Language
en

Technology

CDN
Azure Front Door
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts
Social widgets
  • Vimeo Embed
Third-party hosts loaded (13)
  • cdn.jsdelivr.net×5
  • ajax.googleapis.com×3
  • cdnjs.cloudflare.com×3
  • fonts.googleapis.com×3
  • api.tiles.mapbox.com×2
  • cdn.rawgit.com×1
  • giving.classy.org×1
  • js.hs-scripts.com×1
  • player.vimeo.com×1
  • s7.addthis.com×1
  • translate.google.com×1
  • unpkg.com×1
  • www.googletagmanager.com×1

Social

Contact

Phone
Address
rd Avenue NW, Coon Rapids, MN 55433

Registration

Registrar
Network Solutions, LLC
Created
1997-02-07
Expires
2029-02-08 994 days left
Updated
2023-12-15
Name servers
  • ns13.worldnic.com
  • ns14.worldnic.com

DNS records live

NS
  • ns13.worldnic.com
  • ns14.worldnic.com
MX
  • 0 fmsc-org.mail.protection.outlook.com
TXT
  • AAWxbhFxg+J6CBaO5+zK7GgEq8kWWVc/Sq+SPp74Z1yU5x4SmuuW7sY5SM6ocw4TgVWjgkzmz/7ZtrvklLABTA==
  • ST1Q1MA6IFP1K8VDUUS8K5F0SJZ6ADQ7SRVB52XN
  • jamf-site-verification=WKV6Cof_DRvfNDl-m980Mg
Verified for
  • Airtable
  • Anthropic
  • Apple
  • Atlassian
  • Canva
  • Google
  • Microsoft 365
  • Smartsheet

Email authentication strong

SPF
v=spf1 include:761kinec0x.powerspf.com ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:88dfoaxsj0@rua.powerdmarc.com; ruf=mailto:88dfoaxsj0@ruf.powerdmarc.com; pct=100; fo=1;
policy: quarantine
DKIM
Show 4 DKIM selectors
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz69LLSi56TV9iFW3vr9MACNjsG7qVTIuGiafcIP1tgAlags7Yz3pibPvuXyLn1b7OwrQ2OnrfrwRd…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pfG7rPqYx+2iPugGMCVgfnNf6NDqb6khlOYenz9irva1rvhdSlECwPmGNTRbFW/UyHql5rNkTce75…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh8S1AdCK3pdLbrXppa9JnH0hQNIwzljMiCsJnl1vr5buWginJuysy1c/vEw3RPSAwFIfwMhz/kpQGJH7q…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDG6ymGQvUqCUcpHWIkK9AEKyWY7U3/3D9Lqj7sqcaDs6K/vHwDsAulrr2RNp7aYRrCxLSxaQOHRiKg58tGUK0uXC…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2025-10-22 to 2026-11-20
Expires in 183 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.fmsc.org/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src * 'unsafe-inline' https://fonts.gstatic.com; upgrade-insecure-requests; block-all-mixed-content; img-src * blob: data:; script-src * 'unsafe-inline' 'unsafe-eval';style-src * 'unsafe-inline';connect-src * 'unsafe-inline';frame-src *;worker-src * data: 'unsafe-eval' 'unsafe-inline' blob:;

Links to (8)

Linked from (2)