jamesmadison.org
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- jQuery
- 2.10.3 known XSS (<3.5)
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (4)
- www.googletagmanager.com×3
- fonts.googleapis.com×2
- gmpg.org×1
- www.youtube.com×1
Social
DNS records live
- NS
-
- ns25.domaincontrol.com
- ns26.domaincontrol.com
- MX
-
- 10 alt1.aspmx.l.google.com
- 10 alt2.aspmx.l.google.com
- 20 aspmx2.googlemail.com
- 20 aspmx3.googlemail.com
- 5 aspmx.l.google.com
- TXT
-
MS=352CED951D3B225134EC689418FC0FFBF72CEDE47fc6r2p44qeg0h1sqlqc66u8dg16C69068948582135D125956109641C417004C94
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 include:_spf.google.com include:_spf.sendlane.com include:servers.mcsv.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - k1:
Certificate (current)
R12
Expires in 27 days
HTTP security headers
- findings
-
- missing HSTS
- missing Content Security Policy
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy