indexo.dev

ohsaa.org

.org crawl

First seen 2026-04-16 · Last seen 2026-05-18 · ok HTTP/1.1 200 5973 ms crawled 2026-05-11

US · 104.21.38.67 · AS13335 Cloudflare, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

sector education type homepage

HTML metadata

Title
OHSAA
Description
Ohio High School Athletic Association
Language
en-US
Generator
DotNetNuke

Technology

CDN
Cloudflare
CMS
Joomla
Analytics
  • Google Tag Manager
Fonts
  • Adobe Fonts
  • Google Fonts

Third-party hosts loaded (6)

  • ohsaaweb.blob.core.windows.net×31
  • ajax.googleapis.com×2
  • code.jquery.com×1
  • fonts.googleapis.com×1
  • use.typekit.net×1
  • www.googletagmanager.com×1

Social

Contact

Phone
Address
Ohio High School Athletic Association4080 Roselea Place, Columbus OH 43214 | FAX: 614-267-1677Comments or questions:[email protected]

Registration

Registrar
Network Solutions, LLC
Created
1996-05-30
Expires
2030-05-29 1471 days left
Updated
2021-05-27
Name servers
  • lady.ns.cloudflare.com
  • paul.ns.cloudflare.com

DNS records live

NS
  • lady.ns.cloudflare.com
  • paul.ns.cloudflare.com
MX
  • 5 ohsaa-org.mail.protection.outlook.com
TXT
  • ohsaa-prod.azurewebsites.net
  • ohsaa-web.azurewebsites.net

Email authentication partial

SPF
v=spf1 mx include:spf.protection.outlook.com include:sendgrid.net a:spam.3cemail.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; pct=100; rua=mailto:re+alr3xjfqj4z@dmarc.postmarkapp.com; sp=none; aspf=r;
policy: none (monitoring only) · sp=none
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCjX8+STluEqVvkyTb1t3eGbskmPmIKijkOdrRU/svEDQGIxzL9nxOmfGvynpEFpJgRGkmrKjfE2Tklk8XpfT…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL+mbQ4P9v3aG231fQJur00EHeaU3hQqLToopFoW5kWuYU6ECK4iojYiI8NC3AGzgYyR1I6ss1FjCdT3+H…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC//toCUVekdHWKxfsz+l/lkIGgMtrlx5J864pTJ2O561xzFc0qPAI8i7XosJ8jG/1aEjbdKpLVbWUWBqhplsXZYR…
selectors probed

Certificate (current)

WE1
from 2026-03-18 to 2026-06-16
Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.ohsaa.org/

present
  • x-frame-options
findings
  • missing HSTS
  • missing Content Security Policy
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN

Links to (31)

Linked from (28)