marshallhabitat.org

.org crawl

First seen 2026-05-27 · Last seen 2026-05-31 · ok HTTP/1.1 200 2597 ms crawled 2026-05-30

US · 208.109.22.111 · AS398101 GoDaddy.com, LLC

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title: Marshall Habitat for Humanity of Marshall County
Description: Habitat for Humanity of Marshall County is a nonprofit Christian ministry. We build decent and affordable homes to improve the lives of families.

Open Graph

url: https://marshallhabitat.org
title: Marshall Habitat for Humanity of Alabama
description: Habitat for Humanity of Marshall County is a nonprofit Christian ministry. We build decent and affordable homes to improve the lives of families in Guntersville, Albertville, Arab, Boaz and the surrounding communities of Marshall County, Alabama.

Technology

Server: Apache
PHP: 8.2.30 security-only
jQuery: 3.6.0

Fonts

Google Fonts

Third-party hosts loaded (6)

fonts.googleapis.com×2
hitwebcounter.com×1
img1.wsimg.com×1
rf.revolvermaps.com×1
www.google.com×1
www.prostarseo.net×1

Social

Contact

Phone

(256) 202-9468

Address

P.O. Box 2, 35976, Guntersville, Alabama, United States

DNS records live

NS

ns25.domaincontrol.com
ns26.domaincontrol.com

MX

0 mailstore1.secureserver.net
10 smtp.secureserver.net

TXT

D9786558

Verified for

Google

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-05-14 to 2026-08-12

Expires in 72 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.marshallhabitat.org/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: upgrade-insecure-requests;, default-src 'self'; script-src 'self' https: 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; object-src 'none';