qigonginstitute.org
HTML metadata
Technology
- CDN
- Cloudflare
- PHP
- 8.2.10 security-only
- jQuery
- 2.0.3 known XSS (<3.5)
- Fonts
-
- Google Fonts
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (3)
- www.youtube.com×3
- fonts.googleapis.com×1
- maxcdn.bootstrapcdn.com×1
Social
DNS records live
- NS
-
- maisie.ns.cloudflare.com
- scott.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
Email authentication partial
- SPF
-
v=spf1 ip4:66.228.59.198 ip4:66.206.15.26 +a +mx +ip4:46.21.150.66 include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c6AF+Ly6SzON3LNkE1cRAJ7wWvBkdKMFX+EdIV8KM1aWJapQFtNsMFZncYaNI/+KAmjovvAylh7WG… - google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSa0Kmb4eatZEAAcj4TRabeQ3YOVcxtwptkUzvUtViBtvRJ6YXxHswgFPKEYm+cJf6aJgh3AyEMX5e…
selectors probed - default:
Certificate (current)
WE1
Expires in 43 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- missing HSTS
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests