indexo.dev

merwinconservancy.org

.org crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 7146 ms crawled 2026-05-19

US · 151.101.194.159 · AS54113 Fastly, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Home - Merwin Conservancy
Language
en-US
Generator
WordPress 6.9.4
Canonical
https://merwinconservancy.org/

Open Graph

url
https://merwinconservancy.org/
title
Home - Merwin Conservancy
locale
en_US
site name
Merwin Conservancy

Technology

CDN
Fastly
Server
Flywheel
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (4)

  • fonts.googleapis.com×2
  • js.stripe.com×2
  • www.googletagmanager.com×2
  • s3.amazonaws.com×1

Registration

Registrar
GoDaddy.com, LLC
Created
2009-11-23
Expires
2027-11-23 552 days left
Updated
2024-06-19
Name servers
  • ns33.domaincontrol.com
  • ns34.domaincontrol.com

DNS records live

NS
  • ns33.domaincontrol.com
  • ns34.domaincontrol.com
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com

Email authentication weak

SPF
not published
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed

Certificate (current)

R12
from 2026-03-31 to 2026-06-29
Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://merwinconservancy.org/

present
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
Header values
referrer-policy
no-referrer-when-downgrade
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
x-content-type-options
nosniff

Linked from (1)