orchardvalleyharvest.com

HTML metadata

Title

Home - Orchard Valley Harvest

Language

en-US

Generator

Powered by WPBakery Page Builder - drag and drop page builder for WordPress.

Canonical

https://orchardvalleyharvest.com/

Feeds

Open Graph

url: https://orchardvalleyharvest.com/
title: Home - Orchard Valley Harvest
locale: en_US
site name: Orchard Valley Harvest

Technology

Server: nginx
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Third-party hosts loaded (5)

ovhstaging.wpengine.com×28
cdnjs.cloudflare.com×3
www.googletagmanager.com×2
cookie-cdn.cookiepro.com×1
unpkg.com×1

Social

Registration

Registrar

Wild West Domains, LLC

Created

2005-03-22

Expires

2027-03-22 305 days left

Updated

2024-03-23

Name servers

ns47.domaincontrol.com
ns48.domaincontrol.com

DNS records live

NS

ns47.domaincontrol.com
ns48.domaincontrol.com

MX

0 orchardvalleyharvest-com.mail.protection.outlook.com

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2obTIChGa/38ad5XwKuJ27gS8N5Q+T1xQNtDd2RpLsooTO/lF0qqmmIAoahdE3p5oLuYed2lUaye/J…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CcxY5wGtBojOuby+cyHU5DdKjufAOtce3dlG1TtFYnEoMylB+CPZgSdAH2Pqj+Tu6HrvcU+SBdlAF…

selectors probed

Certificate (current)

R13

from 2026-05-18 to 2026-08-16

Expires in 87 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://orchardvalleyharvest.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(self), payment=()
x-content-type-options: nosniff
content-security-policy: connect-src 'self' analytics.google.com cdn.acsbapp.com cookie-cdn.cookiepro.com my.wpengine.com stats.g.doubleclick.net www.google-analytics.com yoast.com lets.shop maxmind.destinilocators.com https://*.execute-api.us-west-2.amazonaws.com https://cdn.arcgis.com https://geocode.arcgis.com https://*.arcgis.com https://*.arcgisonline.com https://embed.termageddon.com; font-src 'self' data: fonts.gstatic.com https://js.arcgis.com; form-action 'self' www.facebook.com; frame-src destinilocators.com maxmind.destinilocators.com www.facebook.com www.googletagmanager.com; img-src 'self' cdn.destinilocators.com lets.shop cookie-cdn.cookiepro.com data: dify.wpengine.com orchardvalleyharvest.com ovhstaging.wpengine.com secure.gravatar.com www.facebook.com www.google-analytics.com www.google.com www.googletagmanager.com b.videoamp.com https://*.arcgis.com https://*.arcgisonline.com; media-src 'self'; script-src-attr 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' acsbapp.com cdnjs.cloudflar
strict-transport-security: max-age=31536000

Links to (4)

Linked from (1)

jbssinc.com×1