nctcog.org

HTML metadata

Title: Home
Language: en
Canonical: https://www.nctcog.org/

Open Graph

url: https://www.nctcog.org/
title: Home

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×2
cdnjs.cloudflare.com×1
translate.google.com×1
www.googletagmanager.com×1

Contact

Email

DNS records live

NS

ns1-01.azure-dns.com
ns2-01.azure-dns.net
ns3-01.azure-dns.org
ns4-01.azure-dns.info

MX

1 nctcog-org.mail.protection.outlook.com

TXT

Show 4 TXT records

O0ghp3xyw5Ew7wnT2AQhb+NJqI1atV2nIbj8HhSCq5K3W7fLwhtdAfrIQ/IldAIA/23EiUPU5k1LH/Pwenhzvw==
iContact1257705
heygen-verification=a6a64cekicpzl6byj2n87934r3jd6dp1
def38srm77j4i3o793d514p7dh

Verified for

GlobalSign
Google Workspace
Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:8.30.34.222 include:spf.protection.outlook.com include:amazonses.com include:emsd1.com include:u715846.wl097.sendgrid.net include:zcsend.net include:spfa.cpmails.com ip4:8.30.33.251 ip4:8.30.33.172 ip4:8.30.33.173 a:web039.mivamerchant.net ip4:169.45.71.27 ip4:35.80.141.6 ip4:44.229.121.55 ip4:148.59.100.16/28 -all

strict (-all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:re+oft1cstxquq@dmarc.postmarkapp.com; sp=none; aspf=r;

policy: none (monitoring only) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0Zhz1ooYgPucOnmCKcXoDFMaLrOAPYlSMlkcJKyUcM42TNA174Id9db8tGSh1ELDYHQJv5nwfjlWgH5fVRK…
s1: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6zltUMww6Y5X/hZKDU5etlxN7LDFihluii1q1pT/JoRNyMIwcYRlQYrN5HdWBU0v0cMKVKBI4S6BaIRbXQSWpgk…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDhILCNOQCxMKJEOj1LUXc7RLXW9LpEzvAAbYwTfhxu4yi6hEu9pkf8J6lBhhMHxoSCFrABXC5NdwOJS38PVCbfaw…

selectors probed

Certificate (current)

GlobalSign Atlas R3 DV TLS CA 2026 Q2

from 2026-04-27 to 2026-07-26

Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://nctcog.org/

present

strict-transport-security
content-security-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self' *.typekit.net *.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.youtube-nocookie.com https://translate.google.com *.googleapis.com *.google-analytics.com https://ssl.google-analytics.com https://siteimproveanalytics.com https://www.google.com https://www.gstatic.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.clarity.ms https://www.jsfirm.com https://cdn.jsdelivr.net https://nctcog.activehosted.com https://prism.app-us1.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.nctcog.org https://www.googletagmanager.com https://www.youtube-nocookie.com https://translate.google.com *.googleapis.com https://ssl.google-analytics.com https://siteimproveanalytics.com https://www.addevent.com https://cdn.addevent.com https://www.clarity.ms https://scripts.clarity.ms https://www.jsfirm.com https://www.google.com https://www.gstatic.com https://www.google.com/recaptcha/ https://ww
strict-transport-security: max-age=2592000