tickettomato.com

HTML metadata

Title: Ticket Tomato | Find Events & Buy Tickets Online
Description: Discover concerts, theater, sports, and live events near you. Buy tickets securely online with Ticket Tomato.
Canonical: https://www.tickettomato.com/

Open Graph

url: https://www.tickettomato.com/
title: Ticket Tomato | Find Events & Buy Tickets Online
locale: en_US
site name: Ticket Tomato
description: Discover concerts, theater, sports, and live events near you. Buy tickets securely online with Ticket Tomato.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Third-party hosts loaded (2)

cdn.jsdelivr.net×2
www.googletagmanager.com×1

Social

Contact

Phone

800-820-9884

Address

6200 SW Virginia Ave, Suite 208, 97239, Portland, OR, US

Registration

Registrar

eNom, LLC

Created

2009-08-01

Expires

2026-08-01 73 days left

Updated

2025-07-30

Name servers

chuck.ns.cloudflare.com
elma.ns.cloudflare.com

DNS records live

NS

chuck.ns.cloudflare.com
elma.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=juF1ljzH5mZ__NykWdt34ni_1aGOYRpEPyoyehtwaR0

Email authentication strong

SPF

v=spf1 a:tickettomato.com a:ticketsoregon.com include:_spf.google.com include:amazonses.com include:_spf.emailcampaigns.net ip4:35.155.235.187 -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;pct=100;rua=mailto:francis@tickettomato.com;ruf=mailto:francis@tickettomato.com;fo=1;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCBcg6i42Sy2ebxtuBpjcjNoeKY+wyH0reYV0jP2drpxOD8XmbVILhuX6Y3NCC4tk4KRG9g5nmq4mqTHZFIiv…
mail: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzrB4i97Y1PGoloQf56Afor+e7/XZB8IbAh80Ln+WLS82DQz1CAQLHzXoM6bWfNhOb7sk+PzvZ2MoJYxfu9M…
dkim: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7pXuM4CgPQaBiWqhZriV3bNtEte4nuuvRHtQ8B8PBV7k8/26WP/1Cxp5cTxZzq1fOKc/X71COEwSgZDd9T4JVE584c…

selectors probed

Certificate (current)

WE1

from 2026-03-25 to 2026-06-24

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.tickettomato.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net use.typekit.net www.googletagmanager.com ajax.googleapis.com https://ajax.googleapis.com https://connect.facebook.net https://pixel.byspotify.com https://analytics.tiktok.com https://tag.simpli.fi https://static.ads-twitter.com https://platform.twitter.com https://sc-static.net https://sealserver.trustkeeper.net https://*.paypal.com https://*.paypalobjects.com https://js.stripe.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net use.typekit.net https://*.paypal.com https://*.paypalobjects.com; img-src 'self' data: https:; font-src 'self' data: use.typekit.net; connect-src 'self' https://analytics.google.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://evnt.byspotify.com https://analytics.tiktok.com https://analytics.twitter.com https://tr.snapchat.com
strict-transport-security: max-age=31536000; includeSubDomains; preload, max-age=10886400; includeSubDomains; preload