nycom.org

HTML metadata

Technology

Server

Apache

CMS

Joomla

Analytics

• Google Tag Manager

Third-party hosts loaded (1)

• www.googletagmanager.com×1

Social

• youtube
• twitter
• instagram
• facebook

Contact

Email

• ursula@nycom.org

Phone

• 12210518.463.118

DNS records live

NS

• ns3.worldnic.com
• ns4.worldnic.com

MX

• 1 aspmx.l.google.com
• 10 aspmx2.googlemail.com
• 10 aspmx3.googlemail.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

Verified for

• Google

Email authentication partial

SPF

v=spf1 a include:_spf.google.com include:spf.protection.outlook.com include:spf.constantcontact.com ip4:72.0.152.216/29 ip4:63.139.128.74/32 ip4:3.232.185.51/32 -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:reports@dmarc.cnsit.com;

policy: none (monitoring only)

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSyPyMwB0Bi1XSS7El9whdR12yea4K6aXR7JbrrtIowLta7rRvdr+HnkfJVTLcS20tKJOc28d0LbPy…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytTwbnQqZLSNyNHuYKIWemsuZiTmR02g6NMs7UXrvYUSeWqQ/f+UCNGx7wTP8KuDVHI13HEMTjhAJ3Ep5Q…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y8LNhRYzOfNtnZQcargADxM/5sh+NEaQ05wQ+ueVdviNce4SKtyUfq5kNRtS+mTbPMFTH9sB3r5KQM9nO…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://www.nycom.org/

present

• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing HSTS
• missing Content Security Policy
• missing Permissions Policy

Links to (18)

• youtube.com×1
• youtu.be×1
• twitter.com×1
• streak-link.com×1
• openbooknewyork.com×1
• nymir.org×1
• nlc.org×1
• newyorkclass.org×1
• naco.org×1
• mrbgroup.com×1
• instagram.com×1
• google.com×1
• facebook.com×1
• empirecenter.org×1
• ctmale.com×1
• compalliance.org×1
• cgicommunications.com×1
• bartonandloguidice.com×1

Linked from (3)

• ny-mep.com×1
• nymir.org×1
• compalliance.org×1