ustravel.org

HTML metadata

Title: U.S. Travel Association
Description: U.S. Travel is the national, non-profit organization representing and advocating for all components of the travel industry.
Language: en
Canonical: https://www.ustravel.org/

Open Graph

url: https://www.ustravel.org/
title: U.S. Travel Association
image:url: https://www.ustravel.org/sites/default/files/2022-01/gettyimages-124517041_0_0.jpg
site name: U.S. Travel Association

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (5)

js.hs-scripts.com×3
cdn.jsdelivr.net×1
cloud.typography.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2002-06-06

Expires

2031-06-06 1843 days left

Updated

2024-07-03

Name servers

nolan.ns.cloudflare.com
sonia.ns.cloudflare.com

DNS records live

NS

nolan.ns.cloudflare.com
sonia.ns.cloudflare.com

MX

0 ustravel-org.mail.protection.outlook.com

TXT

Show 5 TXT records

79f288f8-672d-46f2-b447-5a8c90689b92
ZOOM_verify_3ZP_kuY9QvuZPQsqZj1BVg
apple-domain-verification=gs1Xj164RJqRvaYo
atlassian-domain-verification=blCQpd8LTgEGcsFUznRldW0wNDIuq2sZuiJLxLd/Ps/F/kw1Sz58Lp/6z8s12azy
google-site-verification=rqFZYN2D_g3Y-AKsTT6ltQiTqJ36Xe9f9rWGOgR2DlA

Email authentication partial

SPF

v=spf1 ip4:209.18.93.86 ip4:205.201.46.198 ip4:205.201.46.25 ip4:207.46.163.208 ip4:208.117.52.113 ip4:184.73.218.132 ip4:74.63.152.0/24 ip4:107.21.104.61 ip4:107.21.105.193 ip4:74.125.148.0/22 ip4:199.85.213.0/25 ip4:67.223.113.0/28 include:spf.protection.outlook.com include:mmsend.com include:app.sgizmo.com include:_spf.salesforce.com include:amazonses.com include:spf.aristotle.com include:50291467.spf08.hubspotemail.net include:mail.zendesk.com -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none; pct=100; fo=1; ri=3600; rua=mailto:06b509d6@mxtoolbox.dmarc-report.com,mailto:MailSecurity@ustravel.org,mailto:dacac1bb0a@rua.easydmarc.us; ruf=mailto:06b509d6@forensics.dmarc-report.com,mailto:MailSecurity@ustravel.org,mailto:dacac1bb0a@ruf.easydmarc.us;

policy: none (monitoring only) · sp=none

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDcXIsPxp9URK0N4BgxlK6TLU/f/ES84haj67WWrNnx+qilnBBImCVNKbfiDsMhNA5I84fjmIURMkS…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEoRW9TwncTNSYad/ZK5d+Ey/1LOi003oLsUKTtKbimEKoA0f+UvnIVPSgZK9a/gYm2GeUA1uTxKEw…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdXDArzNnftsiq7ZDuR43wa/bq8//Lif6TL6RTjAtjFSb0RfyiuD3qO87vBvR4CaC8l7yu70hPqjulyyLi…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDuvU/mUZyFm6pKg4hzq6dTyB8L/uMHzzJl/UNOStQyl7mzKjTrdgyPp4rJe0CsquoIjG+0NIksC/vEefbHu4QYI6…

selectors probed

Certificate (current)

WE1

from 2026-04-14 to 2026-07-13

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.ustravel.org/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=self, fullscreen=self, picture-in-picture=self
x-content-type-options: nosniff
content-security-policy: object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' js.hs-scripts.com clarity.ms cloud.typography.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://platform.twitter.com https://www.google.com; script-src-elem 'self' 'unsafe-inline' http://*.googleapis.com js.hs-analytics.net/ js-agent.newrelic.com cloud.typography.com/ js.hs-banner.com/ js.hs-scripts.com/ https://*.clarity.ms/ w.recruiterbox.com public.tableau.com http://*.googletagmanager.com/ http://connect.facebook.net/ http://gstatic.com http://*.gstatic.com/ http://*.jsdelivr.net player.vimeo.com http://*.vimeocdn.com/ http://cdn-cookieyes.com/ cdn.jsdelivr.net https://cdn.jsdelivr.net https://platform.twitter.com https://www.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com/ js.hs-scripts.com/ clarity.ms/ js-agent.newrelic.com/ cloud.typography.com/ w.recruiterbox.com/ cdn.jsdelivr.net; frame-ancestors 'self' www.ustrav
strict-transport-security: max-age=31536000; includeSubDomains, max-age=300
content-security-policy-report-only: object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' js.hs-scripts.com clarity.ms cdn.jsdelivr.net https://cdn.jsdelivr.net https://platform.twitter.com https://www.google.com; script-src-elem 'self' 'unsafe-inline' http://*.googleapis.com js.hs-analytics.net/ js-agent.newrelic.com cloud.typography.com/ js.hs-banner.com/ js.hs-scripts.com/ https://*.clarity.ms/ w.recruiterbox.com public.tableau.com http://*.googletagmanager.com/ http://connect.facebook.net/ http://gstatic.com http://*.gstatic.com/ http://*.jsdelivr.net player.vimeo.com http://*.vimeocdn.com/ http://cdn-cookieyes.com/ cdn.jsdelivr.net https://cdn.jsdelivr.net https://platform.twitter.com https://www.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com cdn.jsdelivr.net; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com js.hs-scripts.com clarity.ms js-agent.newrelic.com cloud.typography.com w.recruiterbox.com cdn.jsdelivr.net; frame-ancestors 'self' www.ustravel.org