rfgh.net

.net crawl

First seen 2026-05-02 · Last seen 2026-05-09 · ok HTTP/1.1 200 2464 ms crawled 2026-05-09

US · 35.153.185.11 · AS14618 Amazon.com, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title: Redington-Fairview General Hospital
Language: en

Technology

Server: CERN

Analytics

Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (4)

s3.us-east-1.amazonaws.com×2
www.youtube.com×2
collector-17898.us.tvsquared.com×1
www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar

Network Solutions, LLC

Created

2001-05-18

Expires

2033-05-18 2554 days left

Updated

2023-05-18

Name servers

ns47.worldnic.com
ns48.worldnic.com

DNS records live

NS

ns47.worldnic.com
ns48.worldnic.com

MX

20 usb-smtp-inbound-1.mimecast.com
30 usb-smtp-inbound-2.mimecast.com

TXT

Show 5 TXT records

qgt0ve30ippbo0imh0gaboo6bv
krocai5dso6oicinjl9fmb18ru
mmnqgs4vmc1uck8e9kc554j55j
MS=26D563A42EEA00179CE315FA38A9ECBDFA817429
8piglt7eu08fm91oskrhl3l7va

Verified for

Apple
Microsoft 365

Email authentication partial

SPF: v=spf1 ip4:192.159.148.67 ip4:192.159.148.80 ip4:192.159.148.79 include:usb._netblocks.mimecast.com -all
strict (-all)
DMARC: v=DMARC1; p=none; rua=mailto:6526ca3d@mxtoolbox.dmarc-report.com; ruf=mailto:6526ca3d@forensics.dmarc-report.com; fo=1
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

Sectigo RSA Domain Validation Secure Server CA

from 2025-05-14 to 2026-06-01

Expires in 11 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://rfgh.net/index.xhtml

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: user-agent ; base-uri 'none'; default-src 'self' www.googletagmanager.com fonts.googleapis.com calendar.google.com www.google-analytics.com fonts.gstatic.com 8jq0hovjeg.execute-api.us-east-1.amazonaws.com participant.connect.us-east-1.amazonaws.com wss://tufsuyburufn.transport.connect.us-east-1.amazonaws.com ; img-src 'self' www.liveandworkinmaine.com www.livesafemobile.com s3.amazonaws.com s3.us-east-1.amazonaws.com www.google-analytics.com www.googletagmanager.com chart.googleapis.com tag.simpli.fi collector-17898.us.tvsquared.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' dend6g4sigg57.cloudfront.net www.google-analytics.com www.googletagmanager.com 8jq0hovjeg.execute-api.us-east-1.amazonaws.com 8jq0hovjeg.execute-api.us-east-1.amazonaws.com 'report-sample' ; frame-src 'self' calendar.google.com accounts.google.com livesafe.jotform.com www.youtube.com ; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com ; report-uri /csp-report