简体中文acl.gov
At a glance
- Category
- Social & Community
- Language
- English
- Paid-content signal
- Paid contentObserved
- Registered
- 2012
- Hosting
- Microsoft CorporationInferred
- HTTPS certificate trusted
- PassedObserved
- Last updated
Related questions
More questions →What is acl.gov?
Does acl.gov offer paid content?
What languages does acl.gov support?
How can I visit acl.gov?
What are some alternatives to acl.gov?
Website Overview
Identifiable technologies and additional version or configuration signals make the service easier to fingerprint, which may help targeted scanners narrow their checks. An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality.
Domain and Registration
Registered in 2012, this domain has about 13 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses .gov, a restricted namespace whose registration normally has eligibility requirements. Registration contact information is publicly available through RDAP.
DNS and Email
Nameservers are provided by Azure DNS, indicating managed DNS hosting. MX records point to the acl.gov email service. DNSSEC is enabled, allowing validating resolvers to authenticate signed DNS data. CAA records restrict which certificate authorities are authorized to issue certificates. No CNAME was found; the observed records resolve directly to addresses.
TLS and Certificates
The certificate includes the organization field US Department of Health and Human Services. The certificate issuer is IdenTrust, a commercial certificate authority. The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. The certificate is valid for about 198 days in total, with 62 days remaining.
HTTP and Browser Security
The Server header exposes the software version: nginx/1.28.0. This makes version-targeted checks easier, but is not proof of an exploitable vulnerability. X-Powered-By exposes backend information: PHP/8.3.29. The response lacks these common security headers: HSTS, Referrer-Policy, Permissions-Policy. No obvious internal addresses or debug information were found in the headers. No explicit CDN or WAF marker was found in the response headers.
Technology Stack Analysis
The public page identifies Drupal 10 (https://www.drupal.org), Drupal, Bootstrap, nginx 1.28.0, PHP, with exact versions exposed for 1 technologies. These details can narrow vulnerability checks, although exposure alone is not a vulnerability.
Search and Social Sharing
No homepage meta description was detected, leaving snippet selection more dependent on page text. The Generator tag identifies Drupal 10 (https://www.drupal.org), making the publishing system easier to fingerprint. Open Graph is partially configured; og:title, og:description, og:type is missing. The title has 51 characters, within a common display range. The observed directives allow indexing and link following.
Hosting and Email
Azure DNS
Microsoft Corporation
Boydton, Virginia, United States
Inferred
52.177.125.56
Registration details
| Registrar | get.gov |
|---|---|
| Registered | 2012-11-14 |
| Expires | 2027-09-15 |
| Domain status | server transfer prohibited |
| Nameservers | ns1-09.azure-dns.com、ns2-09.azure-dns.net、ns3-09.azure-dns.org、ns4-09.azure-dns.info |
| DNSSEC | signed |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | acl.gov | 52.177.125.56 | 2233 | — |
| MX | acl.gov | acl.gov | 3600 | 5 |
| MX | acl.gov | smtp2.ees.hhs.gov | 3600 | 10 |
| MX | acl.gov | smtp.ees.hhs.gov | 3600 | 20 |
| NS | acl.gov | ns1-09.azure-dns.com | 86400 | — |
| NS | acl.gov | ns2-09.azure-dns.net | 86400 | — |
| NS | acl.gov | ns3-09.azure-dns.org | 86400 | — |
| NS | acl.gov | ns4-09.azure-dns.info | 86400 | — |
| TXT | acl.gov | MS=ms85463585 | 3600 | — |
| TXT | acl.gov | _e04ijo4hna2tlpq33or0f81da08r3fo | 3600 | — |
| TXT | acl.gov | aclprdapp03.azurewebsites.net | 3600 | — |
| TXT | acl.gov | google-site-verification=rTatztd3M-I2ydDnqcPS6ZoffubOHOwmjd5IJqVOugA | 3600 | — |
| TXT | acl.gov | identrust_validate=KyyfDt3PinAdcsEyQakY4uoHS20WLUUqDncg2AekxhV7 | 3600 | — |
| TXT | acl.gov | s8ABJALBKATq4NPGQclheGgohTSuzbB2mULmVNvttODiM2dUTItd+9BQhfnhLL/KdHqSWF0+NpmOv6/lOP9ARw== | 3600 | — |
| TXT | acl.gov | v=spf1 a mx ptr ip4:158.74.17.50 ip4:20.12.18.210 ip4:172.172.15.1 -all | 3600 | — |
| CAA | acl.gov | 0 issue "digicert.com" | 3600 | — |
| CAA | acl.gov | 0 issue "identrust.com" | 3600 | — |
| CAA | acl.gov | 0 issuewild "digicert.com" | 3600 | — |
| DS | acl.gov | 42144 13 2 c49752174273d1321b230c432a43324e7692e52af8c219449d833ea10f01752b | 3600 | — |
| DMARC | _dmarc.acl.gov | v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected]; | 3600 | — |
TLS and certificates
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html; charset=UTF-8 |
| content-language | en |
| cache-control | max-age=300, public |
| server | nginx/1.28.0 |
| content-security-policy | frame-src *.youtube.com *.youtu.be acl.gov youtu.be *.addtoany.com addtoany.com static.addtoany.com; frame-ancestors *.youtube.com *.youtu.be acl.gov youtu.be *.addtoany.com addtoany.com static.addtoany.com; child-src *.youtube.com *.youtu.be acl.gov youtu.be *.addtoany.com addtoany.com static.addtoany.com; report-uri /report-csp-violation |
| x-frame-options | SAMEORIGIN |
| x-content-type-options | nosniff |
Identified technologies
Pages, Search and Sharing
| Meta description | Not detected |
|---|---|
| Canonical URL | http://acl.gov/ |
| Language | English (default) |
| Twitter Card | Not detected |
Social Sharing Preview
3 fields
robots.txt (opens in a new tab)
52 rulesAll bots 18 allowed · 34 disallowed
- Allow
/core/*.css$ - Allow
/core/*.css? - Allow
/core/*.js$ - Allow
/core/*.js? - Allow
/core/*.gif - Allow
/core/*.jpg - Allow
/core/*.jpeg - Allow
/core/*.png - Allow
/core/*.svg - Allow
/profiles/*.css$ - Allow
/profiles/*.css? - Allow
/profiles/*.js$ - Allow
/profiles/*.js? - Allow
/profiles/*.gif - Allow
/profiles/*.jpg - Allow
/profiles/*.jpeg - Allow
/profiles/*.png - Allow
/profiles/*.svg - Disallow
/core/ - Disallow
/profiles/ - Disallow
/README.md - Disallow
/composer/Metapackage/README.txt - Disallow
/composer/Plugin/ProjectMessage/README.md - Disallow
/composer/Plugin/Scaffold/README.md - Disallow
/composer/Plugin/VendorHardening/README.txt - Disallow
/composer/Template/README.txt - Disallow
/modules/README.txt - Disallow
/sites/README.txt - Disallow
/themes/README.txt - Disallow
/web.config - Disallow
/admin/ - Disallow
/comment/reply/ - Disallow
/filter/tips - Disallow
/node/add/ - Disallow
/search/ - Disallow
/user/register - Disallow
/user/password - Disallow
/user/login - Disallow
/user/logout - Disallow
/media/oembed - Disallow
/*/media/oembed - Disallow
/index.php/admin/ - Disallow
/index.php/comment/reply/ - Disallow
/index.php/filter/tips - Disallow
/index.php/node/add/ - Disallow
/index.php/search/ - Disallow
/index.php/user/password - Disallow
/index.php/user/register - Disallow
/index.php/user/login - Disallow
/index.php/user/logout - Disallow
/index.php/media/oembed - Disallow
/index.php/*/media/oembed
No matching rules.
Sitemaps
0No sitemaps found
Recent Updates
- Website images
- Screenshots
- Network details
- Website Technologies
- Pages and Search Information
- HTTP Response Information
- TLS and certificates
- DNS Information
- Domain Registration
- Website profile
- Website Name
- Website profile
- Website Description
- Website Name
User reviews (0)