mgoconnect.org

HTML metadata

Title: MGO Connect
Description: No upfront cost government software that provides a complete Permitting, Planning and Zoning, Code Enforcement and more software solution.
Language: en

Open Graph

url: https://www.mgoconnect.org
title: Government Permitting Software - Land Management and more
description: No upfront cost government software that provides a complete Permitting, Planning and Zoning, Code Enforcement and more software solution.

Technology

Server: Microsoft-IIS

Third-party hosts loaded (1)

api.tiles.mapbox.com×1

Registration

Registrar

GoDaddy.com, LLC

Created

2019-12-26

Expires

2026-12-26 220 days left

Updated

2026-02-09

Name servers

ns-1252.awsdns-28.org
ns-1594.awsdns-07.co.uk
ns-382.awsdns-47.com
ns-515.awsdns-00.net

DNS records live

NS

ns-1252.awsdns-28.org
ns-1594.awsdns-07.co.uk
ns-382.awsdns-47.com
ns-515.awsdns-00.net

MX

0 mgoconnect-org.mail.protection.outlook.com
99 d359216a.ess.barracudanetworks.com
99 d359216b.ess.barracudanetworks.com

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc-report@mgoconnect.org

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wAua9MP2oMaMGWJHkcFQIYJ8K9aj+3FNIK5TUuLWi3CwN31SVqdOwr2/nkI97TZ3qLaTcKa7xPdei…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2025-09-09 to 2026-10-11

Expires in 145 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.mgoconnect.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(self "https://mgo-api.revcord.com" "https://mtdev.revcord.com"), microphone=(self "https://mgo-api.revcord.com" "https://mtdev.revcord.com"), geolocation=(self "https://mgo-api.revcord.com" "https://mtdev.revcord.com"), autoplay=(self "https://mgo-api.revcord.com" "https://mtdev.revcord.com"), payment=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://*.mapbox.com https://hosted.paysafe.com https://secure.nmi.com https://velox.transactiongateway.com https://js.paygateway.com https://js.test.paygateway.com https://www.bridgepaynetsecuretest.com https://www.bridgepaynetsecuretx.com https://api.demo.convergepay.com https://api.convergepay.com https://jstest.authorize.net https://js.authorize.net https://checkout.clover.com https://checkout.sandbox.dev.clover.com https://testpayframe.fuzepace.com https://payframe.fuzepace.com https://api.forte.net https://sandbox.forte.net https://secure.paystar.io https://dev.paystar.io https://sandbox.usaepay.com https://www.usaepay.com https://js.globalpay.com https://interfaces.certifiedpayments.net https://www.google.com https://www.gstatic.com https://applepay.cdn-apple.com; style-src 'self' 'unsafe-inline' https://api.tiles.mapbox.com https://fonts.googleapis.com; img-src 'self' data: blob: htt
strict-transport-security: max-age=31536000; includeSubDomains