franklincoks.org

.org crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 3635 ms crawled 2026-05-20

US · 208.90.189.251 · AS36489 IP Pathways, LLC

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Franklin County, KS - Official Website | Official Website
Language: en

Technology

jQuery: 3.7.1
Stack: ASP.NET

Third-party hosts loaded (1)

docaccess.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

1998-09-17

Expires

2030-09-16 1579 days left

Updated

2025-09-10

Name servers

ns25.domaincontrol.com
ns26.domaincontrol.com

DNS records live

NS

ns25.domaincontrol.com
ns26.domaincontrol.com

MX

10 mx1-us1.ppe-hosted.com
10 mx2-us1.ppe-hosted.com

TXT

Show 7 TXT records

hibp-verify=dweb_wcrg1vdazq7au1fpqfad2f2v
nvfha2s1b6injeaeunf71k4sng
MS=AA33677EAA104AEAD7423B9AD0AC3D12C6CC9269
ppe-320251f3a2155772275532fde3ec0a35daf63f2f
Foxit-domain-verification=49a2b6899a4e7540097b104a65bf3826
bw=ZC5K2ahV2X4djeUFctHGhAwAx0h1QaD0hocetG6pBV1T
+92vonqCrLgO8efLI+Pc4Hl9CcFwPJ7FriCxeoCfJgTgZse8SNhPEvOzlXxF0W/l81xJ2xB9ovyXeiCcCJVsbw==

Verified for

Apple
Microsoft 365
Zoom

Email authentication weak

SPF: v=spf1 a:dispatch-us.ppe-hosted.com include:spf.protection.outlook.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-05-12 to 2026-08-10

Expires in 82 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://franklincoks.org/

present

content-security-policy
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *