bloomingtonmn.org

.org crawl

First seen 2026-04-20 · Last seen 2026-05-14 · ok HTTP/1.1 200 2502 ms crawled 2026-05-14

US · 141.193.213.21 · AS209242 Cloudflare London, LLC

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title

Bloomington MN Travel & Tourism - Mall of America Hotels

Description

Visit the official site of Bloomington, MN – home of Mall of America® and just minutes from Minneapolis and St. Paul.

Language

en-US

Generator

Divi Child v.1.0.8.5

Canonical

https://www.bloomingtonmn.org/

Feeds

Open Graph

url: https://www.bloomingtonmn.org/
title: Bloomington MN Travel & Tourism - Mall of America Hotels
locale: en_US
site name: Bloomington MN Travel & Tourism - Mall of America Hotels
description: Visit the official site of Bloomington, MN – home of Mall of America® and just minutes from Minneapolis and St. Paul.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Adobe Fonts

Third-party hosts loaded (7)

app.snapsea.io×2
use.typekit.net×2
www.googletagmanager.com×2
cdn.arestravel.com×1
cdn.cookielaw.org×1
cdn.getsmartcontent.com×1
snapsea.fra1.digitaloceanspaces.com×1

Social

Contact

Phone

952-858-8500

Registration

Registrar

Network Solutions, LLC

Created

1997-07-31

Expires

2026-07-30 71 days left

Updated

2025-06-07

Name servers

aisha.ns.cloudflare.com
finley.ns.cloudflare.com

DNS records live

NS

aisha.ns.cloudflare.com
finley.ns.cloudflare.com

MX

10 us-smtp-inbound-1.mimecast.com
10 us-smtp-inbound-2.mimecast.com

TXT

facebook-domain-verification=u5grjzce8xhnxeigtjcq08cgjg97mi

Email authentication partial

SPF: v=spf1 include:us._netblocks.mimecast.com include:spf.protection.outlook.com include:spf.dynect.net include:_spf.act-on.net include:spf.US.exclaimer.net include:relay.mailchannels.net ~all
softfail (~all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-01 to 2026-06-30

Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.bloomingtonmn.org/

present

x-frame-options
permissions-policy

findings

missing HSTS
missing Content Security Policy
missing content type protection
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")