chinohills.org
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (3)
- docaccess.com×2
- www.googletagmanager.com×1
- www.youtube.com×1
Social
Contact
- Phone
Registration
- Registrar
- Network Solutions, LLC
- Created
- 1998-02-10
- Expires
- 2034-02-09 2821 days left
- Updated
- 2024-12-16
- Name servers
-
- ns-1270.awsdns-30.org
- ns-163.awsdns-20.com
- ns-1790.awsdns-31.co.uk
- ns-912.awsdns-50.net
DNS records live
- NS
-
- ns-1270.awsdns-30.org
- ns-163.awsdns-20.com
- ns-1790.awsdns-31.co.uk
- ns-912.awsdns-50.net
- MX
-
- 10 us-smtp-inbound-1.mimecast.com
- 10 us-smtp-inbound-2.mimecast.com
- TXT
-
Show 7 TXT records
vo7edeb0be63fm2ip9vlctbf9e4g9faj3mdfb3bor3e7cvrqv1tlMS=288685BB86AEF79820F54F6BA2DC914B645A51FFMtH4f18BVhjZ1RLhcODQ6PzrJ+UHFzamXULb/k1EFTRVN4XieT5OlWlIvPsOXZY8ZQdy0iqrjWKUysZdBsEQBg==nearmap-domain-verification=b6e56a191bc0753119fc82e5775dc7308d14248340e0c99bd92e4c9fa781a205otos0q05jrsvc8lns6ugqlh7rn3knfsecq4lbkfm738d88gsgh
- Verified for
-
- Adobe
- Apple
- Atlassian
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:us._netblocks.mimecast.com ip4:69.63.82.51 ip4:69.63.82.52 ip4:47.181.38.81 include:amazonses.com include:_xnspf.paymentus.com include:spf.constantcontact.com include:servers.mcsv.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:it@chinohills.orgpolicy: none (monitoring only) - DKIM
-
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - k2:
Certificate (current)
R12
Expires in 67 days
HTTP security headers
- present
-
- content-security-policy
- x-content-type-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *