waterfallresort.com

HTML metadata

Title: Premier Alaska Fishing Lodge | Waterfall Resort Alaska, great fishing since 1912
Description: Legendary Waterfall Resort is Alaska's best fishing resort for wild Alaska salmon, Pacific halibut fishing, and more than 20 other sport-fish.
Language: en
Canonical: https://www.waterfallresort.com/

Open Graph

url: https://www.waterfallresort.com/
title: Premier Alaska Fishing Lodge | Waterfall Resort Alaska, great fishing since 1912
site name: Waterfall Resort
description: Legendary Waterfall Resort is Alaska's best fishing resort for wild Alaska salmon, Pacific halibut fishing, and more than 20 other sport-fish.

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (6)

cloud.typography.com×2
storage.googleapis.com×2
birdeye.com×1
js.hsforms.net×1
no-cache.hubspot.com×1
www.googletagmanager.com×1

Social

Contact

Phone

8005445125

Address

st Photos© The Waterfall Group •1249

Registration

Registrar

Network Solutions, LLC

Created

1997-10-28

Expires

2026-10-27 161 days left

Updated

2025-08-28

Name servers

ns67.worldnic.com
ns68.worldnic.com

DNS records live

NS

ns67.worldnic.com
ns68.worldnic.com

MX

10 waterfallresort-com.mx1.arsmtp.com
20 waterfallresort-com.mx2.arsmtp.com

TXT

Show 8 TXT records

MS=ms62403232
gpd2s0vvujqn8e5k3ecfv896gt
jfgqqpsph1tju2vmde3afnoq91
MS=ms86554619
f5er0k4jnq7huejqhh6pub2u5u
google-site-verification=4OzoS6XA7h2jx7WUelZRgGLJPR32dfL5oS-T4izBB1Q
pardot_17852_*=dc705dac9fccdfc7b1eac0a68604ae03347107b4d3629d9981dd3312ca30ff79
42elt7i3i67bc73pp5lrtm902

Email authentication strong

SPF: v=spf1 ip4:64.7.100.67 ip4:64.7.111.3 include:aspmx.pardot.com include:9101685.spf10.hubspotemail.net include:bf10x.hubspotemail.net include:_spf.salesforce.com ~all
softfail (~all)
DMARC: v=DMARC1; p=quarantine; fo=1; ri=86400; rua=mailto:DMARCreports@waterfallresort.com; ruf=mailto:DMARCreports@waterfallresort.com;
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-05-09 to 2026-08-07

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.waterfallresort.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=(), microphone=(), camera=(), accelerometer=(), gyroscope=(), magnetometer=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.googletagservices.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://js.hs-scripts.com https://js.hsforms.net https://js.hs-banner.com https://js.hubspot.com https://js.hs-analytics.net https://js.hsadspixel.net https://bat.bing.com https://player.vimeo.com https://storage.googleapis.com https://birdeye.com https://widgets-v7.birdeye.com https://a.usbrowserspeed.com/ https://tracking.intentsify.io https://js.zi-scripts.com blob:; style-src 'self' 'unsafe-inline' https: https://cloud.typography.com; img-src 'self' https: data:; font-src 'self' https: data: https://cloud.typography.com; connect-src 'self' https: wss:; frame-src 'self' https: https://player.vimeo.com https://birdeye.com; frame-ancestors 'self'; upgrade-insecure-requests;
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin

Links to (14)

Linked from (1)

bigskyfarmersmarket.com×1