indexo.dev

hendersonsiga.com

.com crawl

First seen 2026-05-03 · Last seen 2026-05-10 · ok HTTP/1.1 200 1102 ms crawled 2026-05-10

US · 199.36.158.100 · AS54113 Fastly, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Description
Your Favorite Grocery Stores
Language
en

Technology

CMS
Gatsby
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts
Third-party hosts loaded (11)
  • cdnjs.cloudflare.com×4
  • aogecom.s3.amazonaws.com×1
  • aogmedia.s3.amazonaws.com×1
  • api.userway.org×1
  • assets.edgenet.com×1
  • cdn.userway.org×1
  • fonts.googleapis.com×1
  • fonts.gstatic.com×1
  • js.stripe.com×1
  • m.stripe.network×1
  • www.googletagmanager.com×1

Registration

Registrar
GoDaddy.com, LLC
Created
2019-02-04
Expires
2027-02-04 260 days left
Updated
2026-02-06
Name servers
  • ns77.domaincontrol.com
  • ns78.domaincontrol.com

DNS records live

NS
  • ns77.domaincontrol.com
  • ns78.domaincontrol.com
MX
  • 10 hendersonsiga-com.mail.protection.outlook.com
TXT
  • hosting-site=prod-aog-theme2
  • google-site-verification=sVHnwGY3WWnInRYaOn_3YwDlvQbpGWagjUiH7hwdh3A

Email authentication weak

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

WR3
from 2026-04-18 to 2026-07-17
Expires in 59 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.hendersonsiga.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self), microphone=(), camera=(), payment=()
x-content-type-options
nosniff
content-security-policy
default-src 'self' https://connect.facebook.net https://www.googleadservices.com https://app.redpepperdigital.net https://app.redpepper.digital https://*.s3.amazonaws.com https://recruiting.paylocity.com data: https://i5.walmartimages.com https://td.doubleclick.net https://aq.flippenterprise.net https://iframe.ecrypt.com https://www.youtube.com https://www.google.com https://s3.amazonaws.com https://cdn.cpnscdn.com https://fonts.gstatic.com https://www.googletagmanager.com https://js.stripe.com https://cdn.userway.org https://kit.fontawesome.com https://cdnjs.cloudflare.com https://cdn.rlets.com https://*.simpli.fi https://api.authorize.net https://apitest.authorize.net; script-src 'self' 'unsafe-inline' https://connect.facebook.net https://app.redpepperdigital.net https://app.redpepper.digital https://api.flipp.com https://flipp.alphonso.tv https://maps.googleapis.com https://unpkg.com https://js.authorize.net https://www.google-analytics.com blob: https://jstest.authorize.net https:/
strict-transport-security
max-age=31556926

Links to (1)

Linked from (2)