indexo.dev

chestnutarts.org

.org crawl

First seen 2026-04-16 · Last seen 2026-05-11 · ok HTTP/1.1 200 1947 ms crawled 2026-05-11

US · 198.49.23.145 · AS53831 Squarespace, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
ChestnutArts.org
Language
en-US

Open Graph

url
https://www.chestnutarts.org/
title
ChestnutArts.org
description
Welcome! Explore our website to learn how The Chestnut Center for the Arts unites people from around Central Wisconsin in learning, creating, and experiencing the arts.

Technology

Server
ESF
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts
Third-party hosts loaded (7)
  • lh3.googleusercontent.com×6
  • fonts.googleapis.com×4
  • www.gstatic.com×2
  • apis.google.com×1
  • maps-api-ssl.google.com×1
  • ssl.gstatic.com×1
  • www.googletagmanager.com×1

Contact

Phone

Registration

Registrar
Squarespace Domains II LLC
Created
2005-03-18
Expires
2027-03-18 303 days left
Updated
2026-03-08
Name servers
  • ns-cloud-b1.googledomains.com
  • ns-cloud-b4.googledomains.com
  • ns-cloud-b2.googledomains.com
  • ns-cloud-b3.googledomains.com

DNS records live

NS
  • ns-cloud-b1.googledomains.com
  • ns-cloud-b2.googledomains.com
  • ns-cloud-b3.googledomains.com
  • ns-cloud-b4.googledomains.com
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • 202203211733171j34kqa1pqfi8zuoqg4qo3nrzv0ke6wij53nn98rh81nxsu0lh
  • MS=ms25468360

Email authentication weak

SPF
v=spf1 include:_spf.google.com ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-05-07 to 2026-08-05
Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.chestnutarts.org/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • cross-origin-opener-policy
  • cross-origin-resource-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing Permissions Policy
Header values
referrer-policy
origin
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-eF6dykBFLqSSmS-as3bN2A' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/
cross-origin-opener-policy
unsafe-none
cross-origin-resource-policy
same-site

Links to (1)

Linked from (1)