dmns.org

HTML metadata

Title: Denver Museum of Nature and Science
Description: Premier natural history and science Museum in Denver, Colorado and the western United States. Exhibitions, giant screen theater, planetarium and lectures that explore the wonders of science, Colorado, Earth and the universe.
Language: en

Open Graph

title: dmns.org
description: Premier natural history and science Museum in Denver, Colorado and the western United States. Exhibitions, giant screen theater, planetarium and lectures that explore the wonders of science, Colorado, Earth and the universe.

Technology

CDN: Cloudflare

Analytics

Google Analytics
Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (9)

cdnjs.cloudflare.com×8
static.queue-it.net×2
chat.satis.fi×1
d1bxh8uas1mnw7.cloudfront.net×1
fonts.googleapis.com×1
giving.classy.org×1
translate.google.com×1
www.google-analytics.com×1
www.googletagmanager.com×1

Social

Contact

Phone

+13033706000

Address

2001 Colorado Blvd., 80205, Denver, CO, US

Registration

Registrar

Network Solutions, LLC

Created

1999-11-03

Expires

2027-11-03 533 days left

Updated

2024-11-26

Name servers

ns10.digicertdns.com
ns11.digicertdns.com
ns12.digicertdns.com

DNS records live

NS

ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

MX

0 dmns-org.mail.protection.outlook.com

TXT

Show 22 TXT records

3q9pph2f1ys3p3pgl3dpmw533vbwcs5t
atlassian-domain-verification=tADPQhvLqZPIuiaTTovKuuafRW4NjyswVZmvEyyXho7Q9echiKgXqvq0eai05xhD
amazon-business-verification=31454b8722acb82ff4cd20cde5127f8ee75f476fc76575d6a1b67a8be95b8b4c
google-site-verification=Ru2mkmZKwk_eK7_m-6p8KH_fnNE3ZV5jDEQDHURwsdE
hqQo/+fqs5+bTKQeXXEPe+1QsAYpFJAP6WOIdkXdKXpYoIbl/5/vr3hVCzsJVdG3e8vX75HoFiWL1pyyuO2zgQ==
globalsign-domain-verification=12CB7568DD1971AF86ADF6552AC1FBB5
_a8a60s4ipqjwu3kf9s4n9buj1qccdwk
stripe-verification=926EF65A25E415BE2C5CC62845AEB3CEB6A33F32BD6AAFBBA441D37D46A1E187
apple-domain-verification=PEuXQagHbHOjZA5V
z4n538gblmxzxj2799l6vypng0b81cxj
detectify-verification=93b9f5329b4da33634841d9a1f2075ca
globalsign-domain-verification=080C84A3AA431BD9D89978F657AC1EC9
canva-site-verification=YKT_tH1UUcyl3Li6Y7CSwA
openai-domain-verification=dv-TmDPQFrvBDCUD9JqDAsJynig
adobe-idp-site-verification=b1ed6a919abb0f86b4d32e82d46d18b220855d64c6cd5767e8405022e705c81b
globalsign-domain-verification=349E43001AF2374824A6445E653C8D33
_nz0clyyrzyr1h7nxpybcbgn0r1f3v3p
_tzvkv2lhivbmurhgolz2jc4pbotfswr
anthropic-domain-verification-xnzfed=ox0jxRfDrGAMRa851TlSl1Pe4
globalsign-domain-verification=3B5CAA911D531952E860355FA1A01B8A
njk59tv.ng.impervadns.net
MS=ms66398925

Email authentication strong

SPF

v=spf1 mx a include:spf.protection.outlook.com  include:spf.mandrillapp.com  include:app.sgizmo.com  include:servers.mcsv.net  include:shops.shopify.com  include:_spf.dayforcehcm.com ip4:4.4.78.192/26 ip4:208.75.123.0/24 ip4:81.93.173.201 ip4:81.93.164.103 ip4:67.51.123.126 ip4:198.145.10.0/24 ip4:198.145.10.0/24 ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:81853e66e6544900a8c20cd6fe631599@dmarc-reports.cloudflare.net;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22u0el3icy9ZfeDZrUmwCdfRjMSs/BM9YN97WuGU4sI6/fP6LSgt+Oh4sNhvjCbSFWJJNwpfjxI4Gr…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6se1urMtVN4qILMfnhnpPWqysgwqaYwqk+lUHpU+csOizOJoJZQM7ySMyLJ+kigdA/2FfHwxayjYbF…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

E7

from 2026-04-27 to 2026-07-26

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.dmns.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *; style-src 'self' 'unsafe-inline' *; img-src * data: blob:; font-src * data:; connect-src *; media-src *; frame-src *; object-src 'none'; frame-ancestors 'self';
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin