indexo.dev

wvpentours.com

.com crawl

First seen 2026-04-25 · Last seen 2026-04-25 · ok HTTP/1.1 200 2402 ms crawled 2026-05-19

US · 104.21.72.212 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
West Virginia Penitentiary | Moundsville | Prison Tours
Description
Built in 1866 and decommissioned in 1995, this former state penitentiary now offers day tours, paranormal investigations, escape rooms, and more. Book now!
Language
en-US
Canonical
https://wvpentours.com/

Open Graph

url
https://wvpentours.com/
title
West Virginia Penitentiary | Moundsville | Prison Tours
site name
West Virginia Penitentiary
description
Built in 1866 and decommissioned in 1995, this former state penitentiary now offers day tours, paranormal investigations, escape rooms, and more. Book now!

Technology

CDN
Cloudflare
CMS
WordPress

Third-party hosts loaded (3)

  • cdnjs.cloudflare.com×2
  • fareharbor.com×1
  • stats.wp.com×1

Social

Contact

Email
Phone
Address
818 Jefferson Avenue, 26041, Moundsville, West Virginia, US

Registration

Registrar
GoDaddy.com, LLC
Created
1998-05-05
Expires
2031-05-04 1809 days left
Updated
2024-11-10
Name servers
  • cody.ns.cloudflare.com
  • lucy.ns.cloudflare.com

DNS records live

NS
  • cody.ns.cloudflare.com
  • lucy.ns.cloudflare.com
MX
  • 0 wvpentours-com.mail.protection.outlook.com
TXT
  • v=verifydomain MS=3264826
  • v=verifydomain MS=3950716
  • ca3-92d0d94a3ad943aab842cae80ab081ba
Verified for
  • Google

Email authentication weak

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-05-11 to 2026-08-09
Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://wvpentours.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • cross-origin-opener-policy
findings
  • CSP allows unsafe inline scripts/styles
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: http: blob:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https:; object-src 'none'; base-uri 'self'; frame-src 'self' https:; frame-ancestors 'self'
strict-transport-security
max-age=31536000
cross-origin-opener-policy
same-origin-allow-popups

Links to (6)

Linked from (1)