coastaltourismacademy.co.uk

HTML metadata

Title

National Coastal Tourism Academy

Language

en

Technology

Server

Apache

jQuery

1.12.4 known XSS (<3.5)

Analytics

• Google Tag Manager

Fonts

• Adobe Fonts

Social widgets

• LinkedIn Widget

Third-party hosts loaded (4)

• ajax.googleapis.com×1
• platform.linkedin.com×1
• use.typekit.net×1
• www.googletagmanager.com×1

Social

• linkedin
• facebook
• twitter

DNS records live

NS

• ns0.phase8.net
• ns1.phase8.net
• ns2.phase8.net

MX

• 0 coastaltourismacademy-co-uk.mail.protection.outlook.com

Verified for

• Brevo
• Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc@coastaltourismacademy.co.uk

policy: none (monitoring only)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykBY2UZqe8XeRpQ4fyYOaMTDc6+zpDUOSLJ+F/jK2vfGmY/Ht46p2KBCQl7FWtik5azd2IUQaDwPpU…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
• mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://coastaltourismacademy.co.uk/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (4)

• twitter.com×1
• linkedin.com×1
• facebook.com×1
• englandscoast.com×1

Linked from (1)

• coastalcommunities.co.uk×1