tinkertownmuseum.org

.org crawl

First seen 2026-06-01 · Last seen 2026-06-02 · ok HTTP/1.1 200 4000 ms crawled 2026-06-02

US · 205.196.210.146 · AS26347 New Dream Network, LLC

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title

Tinkertown Museum Home - Tinkertown Museum

Language

en-US

Generator

WordPress 7.0

Canonical

https://www.tinkertownmuseum.org/

Feeds

Open Graph

url: https://www.tinkertownmuseum.org/
title: Tinkertown Museum Home - Tinkertown Museum
locale: en_US
site name: Tinkertown Museum
description: PLAN YOUR VISIT SUPPORT TINKERTOWN It took Ross Ward over 40 years to carve, collect, and lovingly construct the artist-built environment known as Tinkertown Museum. Today, over 50,000 glass bottles […]

Technology

Server: Apache
CMS: WordPress 7.0
jQuery: 3.7.1

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×4
fonts.gstatic.com×1
gmpg.org×1
js.prosopo.io×1

Social

Contact

Phone

(505) 281-5233

Registration

Registrar

DreamHost, LLC

Created

2026-01-09

Expires

2029-01-09 949 days left

Updated

2026-03-02

Name servers

ns1.dreamhost.com
ns2.dreamhost.com
ns3.dreamhost.com

DNS records live

NS

ns1.dreamhost.com
ns2.dreamhost.com
ns3.dreamhost.com

MX

0 mx1.dreamhost.com
0 mx2.dreamhost.com

Email authentication partial

SPF

v=spf1 mx include:netblocks.dreamhost.com include:relay.mailchannels.net -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-04-29 to 2026-07-28

Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.tinkertownmuseum.org/

present

permissions-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")