indexo.dev

globaledconcepts.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-06 · ok HTTP/1.1 200 2420 ms crawled 2026-05-08

US · 40.119.12.71 · AS8075 Microsoft Corporation

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
GEC- Global Educational Concepts

Registration

Registrar
GoDaddy.com, LLC
Created
2004-09-27
Expires
2028-09-27 861 days left
Updated
2025-08-07
Name servers
  • julissa.ns.cloudflare.com
  • nitin.ns.cloudflare.com

DNS records live

NS
  • julissa.ns.cloudflare.com
  • nitin.ns.cloudflare.com
MX
  • 0 globaledconcepts-com.mail.protection.outlook.com
TXT
  • google-site-verification=ycKMTYPZISSWb6ePnDAFKnSpKrQX9YHmox3rEJrahTI
  • MS=ms77439059

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:amazonses.com mx ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:3fc4e4a4aee740b0be4a84ab0f83f98f@dmarc-reports.cloudflare.net
policy: quarantine
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qhl/mrvO3VRsjC6xHS7TDo1uU9GADdqxTUcMNJeBjqqTPOdwgGcJQDJPOTJUGZQqk528TEkBGapxb…
selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1
from 2026-02-19 to 2026-08-20
Expires in 92 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://globaledconcepts.com/login?returnUrl=%2f

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
child-src 'self' platform.twitter.com syndication.twitter.com www.youtube.com; connect-src 'self' clientstream.launchdarkly.com d36mckazhgoc5f.cloudfront.net doscrn1lrdrbj.cloudfront.net edge.api.brightcove.com fastly-signed-us-east-1-prod.brightcovecdn.com gallery-metrics.api.brightcove.com localhost:49506 manifest.prod.boltdns.net overbridgenet.com players.brightcove.net rum.browser-intake-us5-datadoghq.com secure.southwesternlead.com translate.googleapis.com update.adblock360.org w88p9x.com wedata.net www.advantage4teens.com www.google-analytics.com; default-src 'self' 'unsafe-inline' doscrn1lrdrbj.cloudfront.net fonts.googleapis.com fonts.gstatic.com platform.twitter.com unpkg.com widget.uservoice.com; font-src 'self' about cdnjs.cloudflare.com croissant-services-data-public-assets-us-east-2-production.s3.us-east-2.amazonaws.com d36mckazhgoc5f.cloudfront.net data: doscrn1lrdrbj.cloudfront.net fonts.gstatic.com moz-extension use.fontawesome.com use.typekit.net vjs.zencdn.net www.sla

Linked from (1)