lancastercontra.org

.org crawl

First seen 2026-04-13 · Last seen 2026-05-07 · ok HTTP/1.1 200 920 ms crawled 2026-05-07

US · 15.197.225.128 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Welcome
Language: en-US

Open Graph

url: https://www.lancastercontra.org/
title: Welcome
description: Who: All ages are welcome! Bring the whole family, or come on your own! No partner or prior dance experience necessary! How: Bringing a water bottle is encouraged. Other tips and information can be found here: https://www.tcdance.org/contra-tips.php

Technology

Server: ESF

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (6)

fonts.googleapis.com×4
lh3.googleusercontent.com×3
www.gstatic.com×2
apis.google.com×1
ssl.gstatic.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2004-12-10

Expires

2026-12-10 204 days left

Updated

2026-01-24

Name servers

ns55.domaincontrol.com
ns56.domaincontrol.com

DNS records live

NS

ns55.domaincontrol.com
ns56.domaincontrol.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com

TXT

google-site-verification=PQIy9fTRmnkPdEWynztmttavoZGzRryHdM-AL8sTAtc

Email authentication partial

SPF: v=spf1 a mx ptr include:secureserver.net include:_spf.google.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GoDaddy TLS Intermediate CA DV - R1v1

from 2026-03-15 to 2026-09-29

Expires in 132 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.lancastercontra.org/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-8vYsFPM5ndsGyU5wX1eIsQ' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: same-site

Links to (4)

Linked from (1)

kingfisherband.com×2