dreammachineusa.org

.org crawl

First seen 2026-05-31 · Last seen 2026-06-01 · ok HTTP/1.1 200 1976 ms crawled 2026-06-01

US · 64.90.46.10 · AS26347 New Dream Network, LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Home - Dream Machine Foundation
Language
en-US
Generator
All in One SEO (AIOSEO) 4.9.7.2
Canonical
https://www.dreammachineusa.org/
Feeds

Open Graph

url
https://www.dreammachineusa.org/
title
Home - Dream Machine Foundation
locale
en_US
site name
Dream Machine Foundation -

Technology

Server
nginx
CMS
WordPress
jQuery
3.7.1
Fonts
  • Google Fonts
Third-party hosts loaded (8)
  • fonts.googleapis.com×3
  • embed.cheerfulgiving.com×1
  • fonts.bunny.net×1
  • js.hcaptcha.com×1
  • static.klaviyo.com×1
  • widgets.givebutter.com×1
  • www.facebook.com×1
  • www.youtube.com×1

Social

DNS records live

NS
  • ns1.dreamhost.com
  • ns2.dreamhost.com
  • ns3.dreamhost.com
MX
Show 7 MX records
  • 0 alt1.aspmx.l.google.com
  • 0 alt2.aspmx.l.google.com
  • 0 alt3.aspmx.l.google.com
  • 0 alt4.aspmx.l.google.com
  • 0 aspmx.l.google.com
  • 10 lc.mxa.mailgun.org
  • 10 lc.mxb.mailgun.org
TXT
  • klaviyo-site-verification=XGagmi
Verified for
  • Meta

Email authentication partial

SPF
v=spf1 include:spf.mandrillapp.com ?all
neutral (?all)
DMARC
v=DMARC1; p=none
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-05-22 to 2026-08-20
Expires in 77 days

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.dreammachineusa.org/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
x-content-type-options
nosniff
content-security-policy
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;
strict-transport-security
max-age=31536000;

Links to (3)

Linked from (1)