mld.org

HTML metadata

Technology

Server

nginx

CMS

Drupal

Analytics

• Google Tag Manager

Third-party hosts loaded (2)

• www.googletagmanager.com×2
• my.nicheacademy.com×1

Social

• facebook
• instagram
• linkedin
• youtube

Contact

Phone

• 2088884451

Registration

Registrar

GoDaddy.com, LLC

Created

1997-07-10

Expires

2029-07-09 1133 days left

Updated

2024-07-29

Name servers

• ns67.domaincontrol.com
• ns68.domaincontrol.com

DNS records live

NS

• ns67.domaincontrol.com
• ns68.domaincontrol.com

MX

• 1 aspmx.l.google.com
• 10 alt3.aspmx.l.google.com
• 10 alt4.aspmx.l.google.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

TXT

• MS=4EA8B969D88FCC83B034C1333874E471B714C0FD
• include:_spf.psm.knowbe4.com
• "v=spf1 include:amazonses.com ~all" include:amazonses

Verified for

• Airtable
• Apple
• Google

Email authentication weak

SPF

v=spf1 include:_spf.google.com ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ~all

softfail (~all) · multiple SPF records

DMARC

v=DMARC1; p=none; rua=mailto:postmaster@mld.org

policy: none (monitoring only)

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSjONKtSFtdVaX4TQ7hWXqexQpmqlbwo/qZFt3KhwX5BKB4VLqkDqBRQq4xwDC5I4osTNzXivzZUuz…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.mld.org/

present

• strict-transport-security
• x-frame-options
• x-content-type-options

findings

• short HSTS max-age
• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (13)

• youtube.com×1
• supportmld.org×1
• nicheacademy.com×1
• meetup.com×1
• lynxlibraries.org×1
• livechatinc.com×1
• linkedin.com×1
• lili.org×1
• instagram.com×1
• iiivega.com×1
• google.com×1
• friendsofmld.org×1
• facebook.com×1

Linked from (2)

• lynxlibraries.org×1
• cmidaho.org×1