itfnet.org

HTML metadata

Technology

Server

LiteSpeed

CMS

WordPress

jQuery

1.12.4 known XSS (<3.5)

Ads

• Meta Pixel

Fonts

• Google Fonts

Social widgets

• Twitter Widget
• YouTube Embed

Third-party hosts loaded (4)

• fonts.googleapis.com×2
• www.youtube.com×2
• connect.facebook.net×1
• platform.twitter.com×1

Social

• youtube
• facebook
• twitter

DNS records live

NS

• ns135.mschosting.cloud
• ns136.mschosting.cloud

MX

• 0 itfnet.org

Verified for

• Brevo

Email authentication partial

SPF

v=spf1 +a +mx ip4:110.4.45.152 include:se.mschosting.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAOnYs92SHsJWW2rZtNXNzL7wRFGibPLwYYArZuCiWyibGD2xmzkHHnC/vIKSYbvxwB2ukZExuOp/s…
• mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.itfnet.org/v1/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (12)

• youtube.com×1
• wphoot.com×1
• wordpress.org×1
• twitter.com×1
• fao.org×1
• facebook.com×1
• cirdap.org×1
• cabi.org×1
• bioprotectionportal.com×1
• bdspublishing.com×1
• agri-outlook.org×1
• aardo.org×1

Linked from (1)

• aardo.org×1