hillside.wokingham.sch.uk

HTML metadata

Technology

Server

nginx

CMS

WordPress

Analytics

• Google Analytics

Fonts

• Google Fonts

Third-party hosts loaded (6)

• fonts.googleapis.com×2
• elfsightcdn.com×1
• fonts.gstatic.com×1
• maps.googleapis.com×1
• studybugs.com×1
• www.google-analytics.com×1

Social

• facebook
• instagram
• youtube

Contact

Email

• admin@hillside.wokingham.sch.uk

Phone

• 0118 9755771

DNS records live

NS

• ns1.bdm.microsoftonline.com
• ns2.bdm.microsoftonline.com
• ns3.bdm.microsoftonline.com
• ns4.bdm.microsoftonline.com

MX

• 0 hillside-wokingham-sch-uk.mail.protection.outlook.com

TXT

• mscid=b9uBsGHCLLx1kqAg39IyPkl8QLR1/LzntZvRbHgYzszWfUKU2anZFZ/WfasLrZWORA7UlmVjIe+L1jK3HsV7mw==

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:email-auth@hillside.wokingham.sch.uk; ruf=mailto:email-auth@hillside.wokingham.sch.uk; fo=1; adkim=s; aspf=s; pct=100

policy: none (monitoring only)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCMpIK2HNr7HRY1t52L3VY6RLtrZw5Wt2J0g+Chy/sWT06Ie9L1d9WhknOD9p2N8IF0zTKmndUiNCYj7nxgbZ…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://hillside.wokingham.sch.uk/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (9)

• blueappleeducation.com×1
• facebook.com×1
• google.com×1
• instagram.com×1
• office.com×1
• ofsted.gov.uk×1
• scopay.com×1
• wokingham.gov.uk×1
• youtube.com×1

Linked from (1)

• orchardlearningalliance.com×1