mcra.org.uk

HTML metadata

Technology

Server

LiteSpeed

Third-party hosts loaded (1)

• www.paypalobjects.com×1

DNS records live

NS

• ns1.krystal.uk
• ns2.krystal.uk

MX

• 10 mx1.krystal.uk
• 20 mx2.krystal.uk

TXT

• google-site-verification=LYsNthsL-cDXfhUodoY8K7Q_r2xzcVwES9encfVuCH8

Email authentication weak

SPF

v=spf1 ip4:185.194.90.23 mx a ip4:77.72.1.20 include:relay.k.io ~all

softfail (~all)

DMARC

not published

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/SJI3wwKVAwdcMjGTcJNp3zQESFuoiijDKsj1Nmxo6qM572IAZyH3g1qopoftrHf9nCmMi/DGg7Kw…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.mcra.org.uk/wiki/doku.php?id=start

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (4)

• cave-registry.org.uk×2
• charitycommission.gov.uk×2
• creativecommons.org×2
• krystal.uk×2

Linked from (2)

• bec-cave.org.uk×2
• darknessbelow.co.uk×1