visityorktown.org

.org crawl

First seen 2026-04-14 · Last seen 2026-05-17 · ok HTTP/1.1 200 2027 ms crawled 2026-05-07

US · 207.38.72.72 · AS36489 IP Pathways, LLC

Reputation 100/100

Classifying

HTML metadata

Title: York County Tourism, VA | Official Website
Description: Immerse yourself with exciting events and historical celebrations in Yorktown. Between the farmers market, festivals, and concerts taking place, our calendar gets quite full. Discover the unique events happening during your next trip to Historic Yorktown.
Language: en

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)

Social widgets

YouTube Embed

Third-party hosts loaded (11)

www.googletagmanager.com×6
scripts.visitwidget.com×3
www.youtube.com×2
app-script.monsido.com×1
di.rlcdn.com×1
docaccess.com×1
linkprotect.cudasvc.com×1
pubads.g.doubleclick.net×1
up.pixel.ad×1
www.facebook.com×1
www.instagram.com×1

Social

Contact

Phone

757-890-5900

Address

st Office Box 532Yorktown, Virginia 23690

Registration

Registrar

Network Solutions, LLC

Created

2008-09-12

Expires

2026-09-12 114 days left

Updated

2025-07-06

Name servers

ns17.worldnic.com
ns18.worldnic.com

DNS records live

NS

ns17.worldnic.com
ns18.worldnic.com

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-25 to 2026-07-24

Expires in 65 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://visityorktown.org/

present

content-security-policy
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *