indexo.dev

nflflag.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 6564 ms crawled 2026-05-19

US · 3.217.151.24 · AS14618 Amazon.com, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

sector sports type homepage

HTML metadata

Title
NFL FLAG Football | Youth Flag Football Around the World
Description
NFL FLAG is the official flag football league of the NFL and the largest youth flag football organization in the U.S.
Language
en

Technology

Server
nginx
Analytics
  • Google Tag Manager
Ads
  • Google Ads (DoubleClick)
  • Meta Pixel
Cookie consent
  • OneTrust
Fonts
  • Google Fonts
Third-party hosts loaded (9)
  • ad.doubleclick.net×2
  • www.facebook.com×2
  • www.googletagmanager.com×2
  • cdn.cookielaw.org×1
  • cdn.trackjs.com×1
  • connect.facebook.net×1
  • fonts.googleapis.com×1
  • www.google.com×1
  • www.instagram.com×1

Social

Contact

Email
Phone

Registration

Registrar
MarkMonitor Inc.
Created
2004-09-28
Expires
2027-09-28 495 days left
Updated
2025-08-27
Name servers
  • udns1.ultradns.net
  • udns2.ultradns.net

DNS records live

NS
  • udns1.ultradns.net
  • udns2.ultradns.net
MX
  • 10 us-smtp-inbound-1.mimecast.com
  • 10 us-smtp-inbound-2.mimecast.com
TXT
  • 9gdm347f0w1yvfy81h7l31x61hjschbr
  • 0ed1fe018a9a91f3dcfb7445c2a0d7bb0e06744995
Verified for
  • Google

Email authentication partial

SPF
v=spf1 include:servers.mcsv.net include:_spf.salesforce.com include:us._netblocks.mimecast.com include:spf.protection.outlook.com include:helpscoutemail.com -all
strict (-all)
DMARC
v=DMARC1;p=none;fo=1;rua=mailto:6636479c32fe611@rep.dmarcanalyzer.com,mailto:dmarc.aggdata@nfl.com;ruf=mailto:6636479c32fe611@for.dmarcanalyzer.com,mailto:dmarc.forensic@nfl.com
policy: none (monitoring only)
DKIM
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed

Certificate (current)

R12
from 2026-03-27 to 2026-06-25
Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://nflflag.com/

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (39)

Linked from (12)