qaa.ac.uk

HTML metadata

Technology

Analytics

• Google Tag Manager

Third-party hosts loaded (3)

• cdnjs.cloudflare.com×3
• cdn.insight.sitefinity.com×1
• www.googletagmanager.com×1

Social

• bluesky
• linkedin
• youtube

Contact

Phone

• +44 1452 557000 to leave a voicemail

DNS records live

NS

• ns-cloud-b1.googledomains.com
• ns-cloud-b2.googledomains.com
• ns-cloud-b3.googledomains.com
• ns-cloud-b4.googledomains.com

MX

• 10 qaa-ac-uk.mail.protection.outlook.com

TXT

Show 9 TXT records

• cv2nqit4ajlaroq059gl1448cf
• anthropic-domain-verification-x5jbtd=XfzlLqGCGx8LBIOR47PvrS6pa
• f3dq7lo7lnfjq6tb88jsl8djdg
• rpuqh8n300g0dlfmoft7rqr9e0
• atlassian-domain-verification=8KcdAorSeLWHhDk/d5WyjBZQMdMGEkrBS2nbEJVEAo4eE0P1BvNy/z63SLmaO2m7
• google-site-verification=fzsmGl-uUMAWTbFSs5G4CuOa8dkDhzr7iW_C8Qz1mI8
• linkedin-site-verification=f8fcb245-d020-4e46-94d9-0eafeff6ff28
• Quovadis=5df1617c-6787-437a-95fa-a2820e181717
• apple-domain-verification=VMMmrYTWCoN1BWQg

Email authentication strong

SPF

v=spf1 mx a include:spf.protection.outlook.com include:spf.mailjet.com include:spf.eventsforce.net exists:%{i}._spf.mta.salesforce.com ip4:185.94.116.125 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-rua@dmarc.service.gov.uk;

policy: quarantine

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG2sLkSAPpeoFwYZlw/jV5fgK5Uxf7kLJWSPpixW7tWPXxzKbzX9hwOoa1BzrFrEqAAI9+7QdvKWfK…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpRgT5Ai9IElgjIPvfjv4aSlHdOPDPyyUrmhueLMweAbUWKiQYtlFDI+hJOnqejoTqF+3apsuwUw5K…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgGVimFnvXRWgqxnbwMAkiEoq7U3zjn3IQtcy4/P1bOIw8z1bbOvPcruaMLb8GtdYN2RKa2eGXl/bMJrTf…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD4pBm9ETEEa7SbL0Y6J27qPLzi0F3DzQFTc2mE1n7kMJiU80R1CGBlxHM2A3aBOM2YK3guEkEAzHXLadL…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.qaa.ac.uk/

present

• strict-transport-security
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing Content Security Policy
• missing Permissions Policy

Links to (10)

• accesstohe.ac.uk×3
• apple.com×3
• bsky.app×3
• enhancementthemes.ac.uk×3
• google.co.uk×3
• linkedin.com×3
• microsoft.com×3
• mozilla.org×3
• step.ac.uk×3
• youtube.com×3

Linked from (23)

• aber.ac.uk×3
• intercloud9.co.uk×2
• icmp.ac.uk×2
• cardiffmet.ac.uk×2
• dearne-coll.ac.uk×2
• rotherham.ac.uk×2
• artsed.co.uk×2
• rnngroup.co.uk×2
• bruford.ac.uk×2
• winchester.ac.uk×2
• rca.ac.uk×2
• abertay.ac.uk×2
• salford.ac.uk×2
• enhancementthemes.ac.uk×2
• step.ac.uk×2
• preater.com×1
• southessex.ac.uk×1
• stokecoll.ac.uk×1
• skillsandeducationgroupaccess.co.uk×1
• aup.ac.uk×1
• ches.info×1
• raindance.ac.uk×1
• plymouthart.ac.uk×1