indexo.dev

startupschool.org

.org crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 1664 ms crawled 2026-05-18

US · 13.33.235.41 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Startup School - The Best Resource for Founders

Open Graph

title
Startup School - The Best Online Resource for Founders
site name
Y Combinator
description
Learn how to start a company with help from the world's top startup accelerator - Y Combinator.

Technology

CDN
Cloudflare
CMS
Gatsby
Fonts
  • Google Fonts

Third-party hosts loaded (3)

  • bookface-static.ycombinator.com×127
  • cdnjs.cloudflare.com×1
  • fonts.googleapis.com×1

Registration

Registrar
Gandi SAS
Created
2005-03-08
Expires
2027-03-08 292 days left
Updated
2026-02-06
Name servers
  • ns-1135.awsdns-13.org
  • ns-126.awsdns-15.com
  • ns-1891.awsdns-44.co.uk
  • ns-675.awsdns-20.net

DNS records live

NS
  • ns-1135.awsdns-13.org
  • ns-126.awsdns-15.com
  • ns-1891.awsdns-44.co.uk
  • ns-675.awsdns-20.net
MX
  • 1 aspmx.l.google.com
  • 2 alt1.aspmx.l.google.com
  • 3 alt2.aspmx.l.google.com
TXT
  • google-site-verification=lVA1QWOlGnevFb3kJjeUGxhg_wglHe_IVLHVTyhxuuk
  • google-site-verification=nCIQY8PmzwWjXpAHO_Z81aTIR4nhTv4UjDgTMI3GM0g
  • google-site-verification=PQQM_k1p35PR6pl2fYswgR0wn-8WkctnPbPEO9x8jIo

Email authentication weak

SPF
v=spf1 include:mailgun.org ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04
from 2026-03-04 to 2026-09-18
Expires in 121 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.startupschool.org/

present
  • strict-transport-security
  • content-security-policy-report-only
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • cross-origin-opener-policy
findings
  • missing Content Security Policy
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
strict-transport-security
max-age=63072000; includeSubDomains
cross-origin-opener-policy
same-origin
content-security-policy-report-only
script-src 'self' https: https://www.google-analytics.com https://cdn.amplitude.com 'unsafe-eval' 'unsafe-inline' data: 'nonce-EsY0Wod6PrdzZLaDVye4gA=='; worker-src blob: data:; report-uri https://us.sentry.io/api/4506690010480640/security/?sentry_key=aab2498373841041d6b48d721aefbdc1&sentry_environment=production&sentry_release=f48918b77f02f0391d4a758016b8571bac0f2fc2

Links to (1)

Linked from (1)