indexo.dev

nfb.ca

.ca user

First seen 2026-05-21 · Last seen 2026-05-21 · ok HTTP/1.1 200 1562 ms crawled 2026-05-27

CA · 35.182.164.155 · AS16509 Amazon.com, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
National Film Board of Canada
Description
Watch quality Canadian documentary, animation and fiction films online
Language
en
Feeds

Open Graph

url
https://www.nfb.ca
local
en_ca
title
National Film Board of Canada
site name
National Film Board of Canada
description
Watch quality Canadian documentary, animation and fiction films online

Technology

Server
uvicorn
CMS
Gatsby
Stack
Django
Analytics
  • Google Tag Manager

Third-party hosts loaded (5)

  • dkyhanv6paotz.cloudfront.net×11
  • www.nfb.ca×4
  • plus.google.com×1
  • socel.net×1
  • www.googletagmanager.com×1

Social

Registration

Registrar
A.R.C. Informatique Inc.
Created
2000-11-06
Expires
2031-08-25 1901 days left
Updated
2025-03-31
Name servers
  • ns3.nfb.ca
  • ns4.nfb.ca
  • ns5.nfb.ca

DNS records live

NS
  • ns3.nfb.ca
  • ns4.nfb.ca
  • ns5.nfb.ca
MX
  • 10 nfb-ca.mail.protection.outlook.com
TXT
Show 4 TXT records
  • MS=MS26537848
  • BCN=2EDCD5F2-0772-11ED-AAF1-F43480AAB901
  • HAVE-I-BEEN-PWNED-VERIFICATION=A4E45C8AB915F31ED743BC9FE0ECEC6C
  • MS=MS27308068
Verified for
  • Adobe
  • Anthropic
  • Apple
  • Atlassian
  • Google
  • Meta
  • Miro
  • Smartsheet
  • TeamViewer

Email authentication partial

SPF
v=spf1 a ip4:52.20.37.54 ip4:199.84.162.0/24 include:carmamail.com include:spf.protection.outlook.com include:emrs._spf.ssc-spc.gc.ca a:nfb.managed-otrs.com include:mailgun.org ~all
softfail (~all)
DMARC
v=DMARC1;p=none;pct=100;rua=mailto:dmarc_nfb_ca@nfb.ca;ruf=mailto:dmarc_nfb_ca@nfb.ca
policy: none (monitoring only)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCw00FoXhOjT7ghvoqa16oEXcpSoAsJFPDITVFmmz6TyCNnG7wCzAis/qz3yU/JeUaR5owyxXFoAdsvbe27oN…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVO6Ux4I/Ic0nBnpV7gAZ70LkHKXNTjgtq/RW4olVsnn3n6RSZqQIyze8IcsNf4T96fbo16slB1X0NtkP…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxeNI6N5nqfW+p6ldo5QN6YQ1Kss54nBp2AD0+7WcQ/tsw47fj5fdixT/olsN4ZA+lGx0fTqyhJ1zOyXEiiv1mD8…
selectors probed

Certificate (current)

R12
from 2026-03-17 to 2026-06-15
Expires in 5 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.nfb.ca/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
script-src 'self' 'unsafe-inline' https://*.nfb.ca https://*.onf.ca https://maps.googleapis.com https://dkyhanv6paotz.cloudfront.net connect.facebook.net https://graph.facebook.com https://*.googletagmanager.com https://tagmanager.google.com *.google-analytics.com https://apis.google.com/js/platform.js www.gstatic.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.c212.net/ https://c212.net/ https://pixel.mathtag.com/sync/js https://*.adnxs.com/ https://*.adsrvr.org/ https://www.redditstatic.com/ads/; default-src 'self' https://*.nfb.ca https://*.onf.ca; media-src 'self' https://*.onf.ca https://*.nfb.ca https://dkyhanv6paotz.cloudfront.net https://d2vapbn8acl33j.cloudfront.net https://dcly21uuqtecw.cloudfront.net https://d3acx5b8mnvbua.cloudfront.net blob:; img-src 'self' https://*.onf.ca https://*.nfb.ca https://www.facebook.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https

Links to (10)

Use this data via API

Everything on this page for nfb.ca is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/nfb.ca" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →