portofsandiego.org

.org crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 2284 ms crawled 2026-05-19

US · 23.185.0.4 · AS54113 Fastly, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Where San Diego Greets the World | Port of San Diego
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.portofsandiego.org/

Technology

Server: nginx
CMS: Drupal

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (4)

platform-api.sharethis.com×1
use.typekit.net×1
www.googletagmanager.com×1
www.youtube.com×1

Social

Contact

Phone

+1-619-686-6200

Registration

Registrar

Network Solutions, LLC

Created

1998-10-22

Expires

2030-10-21 1614 days left

Updated

2025-08-27

Name servers

ns1.pbi.net
ns2.pbi.net

DNS records live

NS

ns1.pbi.net
ns2.pbi.net

MX

1 portofsandiego-org.mail.protection.outlook.com
100 spooler1.sbcglobal.net
110 fs-mstr.portofsandiego.org
2 smtp.portofsandiego.org

TXT

read-ai-verification=018e620c-92d7-7f94-8a29-e3acff5b49fe
6lidfl275m7l3kb7db91f36km

Verified for

Apple
DocuSign
Microsoft 365

Email authentication partial

SPF

v=spf1 mx a ip4:192.81.130.198/32 include:spf.protection.outlook.com include:594a03.workshop-spf.net -all

strict (-all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:administrator@portofsandiego.org; ruf=mailto:administrator@portofsandiego.org

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD1ZsLBqEyk9Vli1Z/3s5I6wIjUQfJXzQNTeb2V2eM+xEdBtsHD7h/sP3JhBum78jFfsAlsLcQNWGx+n+Jzmf…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-05-02 to 2026-07-31

Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.portofsandiego.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: blob: *.crazyegg.com; font-src 'self' https: data: cloud.typography.com; img-src 'self' https: data: *.crazyegg.com p.typekit.net; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://buttons-config.sharethis.com https://translate.googleapis.com https://js-agent.newrelic.com https://www.googletagmanager.com https://www.google-analytics.com https://bam.nr-data.ne https://beacon.sojern.com/ https://connect.facebook.net/ https://script.crazyegg.com/ https://count-server.sharethis.com/ choozle.com ensighten.com adsrvr.org cs.choozle.com nexus.ensighten.com match.adsrvr *.crazyegg.com https://www.googleadservices.com https://www.google.com https://snap.licdn.com https://acdn.adnxs.com https://*.adform.net use.typekit.net tags.tiqcdn.com https://js.adsrvr.org https://googleads.g.doubleclick.net https://datacloud.tealiumiq.com https://www.facebook.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https:/
strict-transport-security: max-age=300