npenn.org
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Joomla
- Analytics
-
- Cloudflare Insights
- Google Tag Manager
- Fonts
-
- Font Awesome
- Social widgets
-
- Twitter Widget
- YouTube Embed
Third-party hosts loaded (17)
- cdnsm5-ss10.sharpschool.com×31
- cdnsm1-ssradscript.sharpschool.com×21
- cdnsm2-ss10.sharpschool.com×13
- cdnsm1-ss10.sharpschool.com×10
- cdnsm4-ss10.sharpschool.com×2
- cdn.jsdelivr.net×1
- cdnsm1-sstemplatefonts.sharpschool.com×1
- cdnsm3-ss10.sharpschool.com×1
- platform.instagram.com×1
- platform.twitter.com×1
- static.cloudflareinsights.com×1
- tpesov.nui.media×1
- translate.google.com×1
- use.fontawesome.com×1
- www.googletagmanager.com×1
- www.youtube.com×1
- www5.smartadserver.com×1
Social
Contact
- Phone
Registration
- Registrar
- Network Solutions, LLC
- Created
- 1998-08-10
- Expires
- 2034-08-09 2989 days left
- Updated
- 2024-08-15
- Name servers
-
- ns1.comcastbusiness.net
- ns2.comcastbusiness.net
- ns3.comcastbusiness.net
DNS records live
- NS
-
- ns1.comcastbusiness.net
- ns2.comcastbusiness.net
- ns3.comcastbusiness.net
- ns4.comcastbusiness.net
- ns5.comcastbusiness.net
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
autodesk-domain-verification=P45Nv04IpHlQjMsDsLLNduo_sso_verification=bfhrngIdvRYvQ9lyriD1M1puL6lTcD0iGko7nHjIvAvuHe2Glv7vQqaMVi47VhhA
- Verified for
-
- Adobe
- Microsoft 365
- OpenAI
Email authentication partial
- SPF
-
v=spf1 include:_spf.google.com include:_spf.bbnotify.net include:_spf.psm.knowbe4.com include:customerspf.schoolmessenger.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; fo=1;policy: none (monitoring only) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDkFHPCN/tNzg7yr1caiiLgsiyjZoYui7uR0tIRrfUmcABafqLSpYJA5MHzKRI/qcplSWOT+B50Wn9PCRiHuw…
selectors probed - google:
Certificate (current)
WR1
Expires in 46 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- content-security-policy
default-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: blob:; frame-ancestors 'self' https://*.npenn.org; form-action 'self';