indexo.dev

healthcarexfood.org

.org crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 1558 ms crawled 2026-05-18

US · 104.18.13.7 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Home | Health Care by Food
Description
The American Heart Association’s food is medicine initiative Health Care by Food™ is coordinating scientific research, public policy advocacy and stakeholder education to advance food is medicine interventions that incorporate healthy food into health care to treat, manage and prevent diet-related disease.
Language
en
Canonical
https://www.healthcarexfood.org/en/

Open Graph

url
https://www.healthcarexfood.org/en/
title
American Heart Association | Health Care by Food
site name
www.healthcarexfood.org
description
The American Heart Association’s food is medicine initiative Health Care by Food™ is coordinating scientific research, public policy advocacy and stakeholder education to advance food is medicine interventions that incorporate healthy food into health care to treat, manage and prevent diet-related disease.

Technology

CDN
Cloudflare
Analytics
  • Cloudflare Insights
  • Google Tag Manager
Fonts
  • Google Fonts
Third-party hosts loaded (7)
  • static.cloud.coveo.com×4
  • fonts.googleapis.com×2
  • static.heart.org×2
  • cdn.jsdelivr.net×1
  • fonts.gstatic.com×1
  • static.cloudflareinsights.com×1
  • www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar
MarkMonitor Inc.
Created
2023-12-15
Expires
2026-12-15 208 days left
Updated
2025-11-18
Name servers
  • ns1.heart.org
  • ns2.heart.org
  • ns3.heart.org

DNS records live

NS
  • ns1.heart.org
  • ns2.heart.org
  • ns3.heart.org
Verified for
  • Google

Email authentication no MX

SPF
not published
DMARC
v=DMARC1;p=reject;sp=reject;fo=1;rua=mailto:dmarc_rua@emaildefense.proofpoint.com;ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced) · sp=reject
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-16 to 2026-07-15
Expires in 55 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.healthcarexfood.org/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleoptimize.com https://*.cookielaw.org https://*.cloud.coveo.com https://*.googletagmanager.com https://*.fundraiseup.com https://*.google-analytics.com https://*.hotjar.com https://*.facebook.net https://*.quantserve.com https://*.adsrvr.org https://*.vimeocdn.com https://*.pixel.ad https://*.pardot.com https://*.optimizely.com https://*.doubleclick.net https://*.googleadservices.com https://*.sascdn.com https://*.id5-sync.com https://*.licdn.com https://*.ads-twitter.com https://*.googlesyndication.com *; style-src 'self' 'unsafe-inline' *; connect-src 'self' 'unsafe-inline' *; font-src 'self' data: *; img-src 'self' data: *; frame-src 'self' *; media-src 'self' blob: data: *

Links to (15)

Linked from (1)