sporthamilton.com

.com crawl

First seen 2026-04-20 · Last seen 2026-05-17 · ok HTTP/1.1 200 3305 ms crawled 2026-05-14

US · 104.16.223.243 · AS13335 Cloudflare, Inc.

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title: SportHamilton
Language: en-us

Open Graph

url: http://www.sporthamilton.com/page/show/3592625-home-
title: Home
site name: SportHamilton
description: The Official Sport Council for the City of Hamilton

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (13)

cdn1.sportngin.com×19
cdn3.sportngin.com×7
app-assets3.sportngin.com×6
cdn2.sportngin.com×6
app-assets1.sportngin.com×5
app-assets2.sportngin.com×5
cdn4.sportngin.com×5
se-aws-snap.sportngin.com×2
www.googletagmanager.com×2
assets.ngin.com×1
ngin-bar.sportngin.com×1
physicalliteracyhamilton.ca×1
www.google.com×1

Social

Contact

Email

info@sporthamilton.com

Address

PO Box 57060 Jackson Station Post Office

Registration

Registrar

GoDaddy.com, LLC

Created

2007-04-03

Expires

2028-04-03 683 days left

Updated

2026-03-09

Name servers

ns1.sportnginserver.com
ns2.sportnginserver.com
ns3.sportnginserver.com
ns4.sportnginserver.com
ns5.sportnginserver.com

DNS records live

NS

ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

MX

10 sporthamilton-com.mail.protection.outlook.com

TXT

ca3-466841b615184fc181c7c7bd1000874b

Verified for

Microsoft 365

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

from 2026-03-24 to 2026-06-22

Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.sporthamilton.com/

present

content-security-policy-report-only
x-content-type-options
referrer-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy-report-only: block-all-mixed-content; report-uri /csprep/log;