bradfordtiogahs.org

.org crawl

First seen 2026-05-31 · Last seen 2026-06-01 · ok HTTP/1.1 200 2991 ms crawled 2026-06-01

US · 20.84.236.215 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title: Home
Language: en

Open Graph

url: https://www.bradfordtiogahs.org/
title: Home

Technology

Server: Microsoft-IIS
CMS: Joomla
jQuery: 3.5.1

Analytics

Google Tag Manager

Third-party hosts loaded (5)

content.myconnectsuite.com×14
content.schoolinsites.com×6
code.jquery.com×1
maxcdn.bootstrapcdn.com×1
www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar

eNom, LLC

Created

2008-06-05

Expires

2027-06-05 367 days left

Updated

2026-05-27

Name servers

ns3.pcmac.org
ns5.pcmac.org
ns1.pcmac.org
ns2.pcmac-inc.com
ns4.pcmac-inc.com
ns6.pcmac-inc.com

DNS records live

NS

ns1.pcmac-inc.com
ns2.pcmac-inc.com
ns3.pcmac.org
ns4.pcmac.org
ns5.pcmac.org
ns6.pcmac.org

MX

0 bradfordtiogahs-org.mail.protection.outlook.com

TXT

MS=B7E727C867D33C4A8EE3EE42E3B741E0DEB6F7BE

Verified for

Apple
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.schoolinsites.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@pcmac.org; ruf=mailto:dmarc@pcmac.org; fo=1; adkim=s; aspf=s

policy: reject (enforced)

DKIM

default: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2aJd6KrNvWSxU7zNi7sm0N1KjtMHHvgQnC8AT76awNJYOtU+je+tt+3BAqNhFaDGXZ978YVBMmXGbHG2boIgVDjM4j…

selectors probed

Certificate (current)

R12

from 2026-04-21 to 2026-07-20

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.bradfordtiogahs.org

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' *.myconnectsuite.com *.schoolinsites.com *.pcmac.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; font-src 'self' *; base-uri 'self'; form-action 'self' 'unsafe-inline' *; img-src 'self' *; connect-src 'self' *; frame-src *; media-src 'self' blob: *; worker-src 'self' blob: *
strict-transport-security: max-age=63072000; includeSubDomains