ocrfc.co.uk

HTML metadata

Technology

Server

LiteSpeed

CMS

WordPress 6.9.4

PHP

8.3.31 security-only

jQuery

3.7.1

Analytics

• Google Tag Manager

Ads

• Google AdSense

Fonts

• Google Fonts

Social widgets

• Twitter Widget

Third-party hosts loaded (5)

• fonts.gstatic.com×1
• gmpg.org×1
• pagead2.googlesyndication.com×1
• platform.twitter.com×1
• www.googletagmanager.com×1

Social

• facebook
• twitter
• instagram
• youtube

Contact

Phone

• 020 8852 1181

DNS records live

NS

• ns1.ukwebsolutionsdirect.com
• ns2.ukwebsolutionsdirect.com

MX

• 10 filtering.cp247.net
• 20 filtering-backup.cp247.net

Verified for

• GlobalSign

Email authentication partial

SPF

v=spf1 ip4:193.189.75.10 ip4:195.8.197.188 +a +mx +ip4:195.8.197.27 +ip4:195.8.197.30 +ip4:193.189.75.12 +ip4:193.189.75.13 +ip4:193.189.75.97 +ip4:193.189.75.211 +ip4:195.8.196.32 +ip4:195.8.196.82 ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35CSt/x4nALt6rRis5bNBBmvFJeE4IersFvqPU/j6UPoJq8rVSIl0qXTkluYOnTENdzQZKtYr+TTO4…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.ocrfc.co.uk/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (21)

• youtube.com×1
• woodenspoon.org.uk×1
• webpi.co×1
• tylers-sportswear.co.uk×1
• twitter.com×1
• shepherdneame.co.uk×1
• nicolasconsulting.co.uk×1
• munchkinsports.com×1
• millenniumminis.co.uk×1
• livetts.co.uk×1
• judge-priestley.co.uk×1
• jackpetcheyfoundation.org.uk×1
• instagram.com×1
• hornpark.co.uk×1
• facebook.com×1
• englandrugby.com×1
• easyfundraising.org.uk×1
• datatechniques.co.uk×1
• centaurtravel.co.uk×1
• cartwright-wines.com×1
• advantawealth.co.uk×1

Linked from (1)

• amateurrugbypodcast.com×1