indexo.dev

onaf.org

.org crawl

First seen 2026-04-15 · Last seen 2026-05-13 · ok HTTP/1.1 200 1439 ms crawled 2026-05-10

US · 172.241.164.59 · AS396362 Leaseweb USA, Inc.

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
Onitsha Advancement Foundation – Akalanya Sa!
Language
en-US
Generator
WordPress 6.9.4
Canonical
https://onaf.org/
Feeds

Technology

Server
Apache
CMS
WordPress

Third-party hosts loaded (1)

  • gmpg.org×1

Registration

Registrar
PDR Ltd. d/b/a PublicDomainRegistry.com
Created
2021-10-28
Expires
2026-10-28 160 days left
Updated
2025-10-30
Name servers
  • ns1.server.plus
  • ns2.server.plus
  • ns3.server.plus
  • ns4.server.plus

DNS records live

NS
  • ns1.server.plus
  • ns2.server.plus
  • ns3.server.plus
  • ns4.server.plus
MX
  • 0 onaf.org

Email authentication weak

SPF
v=spf1 +a +mx +ip4:172.241.164.123 +ip4:23.19.244.228 ~all
softfail (~all)
DMARC
not published
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiS2c0ZV8MY0ZP8Es7t1fk5cY0TjPFgy6awlTKh5guUTX91p52ItUXGhwvkLhfMNlotieSwv10tR5c…
selectors probed

Certificate (current)

R13
from 2026-03-11 to 2026-06-09
Expires in 19 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://onaf.org/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Linked from (5)