indexo.dev

foxcitiesmarathon.org

.org crawl

First seen 2026-05-11 · Last seen 2026-05-11 · ok HTTP/1.1 200 5849 ms crawled 2026-05-17

US · 141.193.213.20 · AS209242 Cloudflare London, LLC

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
Fox Cities Marathon
Language
en
Generator
Elementor 3.21.5; features: e_optimized_assets_loading, additional_custom_breakpoints; settings: css_print_method-external, google_font-enabled, font_display-auto
Canonical
https://foxcitiesmarathon.org/
Feeds

Technology

CDN
Cloudflare
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts
Third-party hosts loaded (8)
  • cdn.jsdelivr.net×3
  • fonts.googleapis.com×3
  • maps.googleapis.com×2
  • cdn.rlets.com×1
  • fonts.gstatic.com×1
  • pixel.mathtag.com×1
  • translate.google.com×1
  • www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar
GoDaddy.com, LLC
Created
2000-01-05
Expires
2028-01-05 595 days left
Updated
2026-04-18
Name servers
  • nitin.ns.cloudflare.com
  • olga.ns.cloudflare.com

DNS records live

NS
  • nitin.ns.cloudflare.com
  • olga.ns.cloudflare.com
MX
  • 10 mx1c25.carrierzone.com
  • 100 mx2c25.carrierzone.com
  • 110 mx3c25.carrierzone.com
  • 120 mx4c25.carrierzone.com

Email authentication weak

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-19 to 2026-07-18
Expires in 59 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://foxcitiesmarathon.org/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://maps.googleapis.com https://cdn.rlets.com https://pixel.mathtag.com https://translate.google.com https://translate.googleapis.com https://www.gstatic.com https://siteimproveanalytics.com https://translate-pa.googleapis.com https://www.clarity.ms https://racecheck.com https://openfpcdn.io https://bat.bing.com https://connect.facebook.net https://tag.simpli.fi https://freemiumleadsservice.localiq.com https://googleads.g.doubleclick.net https://pubads.g.doubleclick.net https://beacon.krxd.net https://ssl.google-analytics.com https://i.simpli.fi https://www.googleadservices.com https://reachlocal.thinkingchat.com https://eu.thinkingchat.com https://www.reachlocallivechat.com https://scripts.clarity.ms https://dash-widgets.localiq.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://www.gstatic

Links to (19)

Linked from (1)