portofbellingham.com

.com crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 2336 ms crawled 2026-05-20

US · 172.67.74.104 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Port of Bellingham, WA - Official Website | Official Website
Language: en

Technology

CDN: Cloudflare
jQuery: 3.7.1
Stack: ASP.NET

Analytics

Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (3)

docaccess.com×1
www.googletagmanager.com×1
www.youtube.com×1

Social

Contact

Phone

360-676-2500

Registration

Registrar

Tucows Domains Inc.

Created

1996-04-29

Expires

2027-04-30 343 days left

Updated

2026-01-08

Name servers

candy.ns.cloudflare.com
fattouche.ns.cloudflare.com

DNS records live

NS

candy.ns.cloudflare.com
fattouche.ns.cloudflare.com

MX

10 d241492a.ess.barracudanetworks.com
20 d241492b.ess.barracudanetworks.com

Email authentication strong

SPF

v=spf1 ip4:69.7.41.65 include:spf.protection.outlook.com include:servers.mcsv.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:43c43b984d3c4e799aa0ab364a66dea7@dmarc-reports.cloudflare.net,mailto:86f7a142184c.a@dmarcinput.com,mailto:dmarcreports@portofbellingham.com; ruf=mailto:86f7a142184c.f@dmarcinput.com,mailto:dmarcreports@portofbellingham.com; fo=1

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCi3u39pJYcbvAlZ9QHgW/OfUTbGC/1eojrCQwL1LjGqdEcnjKLbEwC2CiTb+khYtAClKToXjOdF0njytoDwA…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-03-31 to 2026-06-29

Expires in 38 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://portofbellingham.com/

present

content-security-policy
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *