schoolz.me

HTML metadata

Technology

Server

nginx

CMS

WordPress

Fonts

• Google Fonts

Social

• instagram

DNS records live

NS

• ns1.schoolz.me
• ns2.schoolz.me

MX

• 1 smtp.google.com

Verified for

• Google

Email authentication strong

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; adkim=s; aspf=s

policy: quarantine

DKIM

• default: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+V+gBW2pigxPPeiBT4Rr6MXAWHUQu56Kf5miuJG5TFfAvpIeQT+E3R8If7ms0gK6CyOYlfav3eXCSuc/GodiF…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://schoolz.me/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (22)

• web.app×2
• urbantech.org×2
• thebccsa.org×2
• seeallacademy.com×2
• ps369.org×2
• ps242q.org×2
• ps1x.org×2
• ps18bronx.com×2
• ps179.com×2
• ps154x.com×2
• owe-csa.org×2
• nysalas.org×2
• mshs223.org×2
• manhattanhsdistrict.org×2
• jhs22.com×2
• instagram.com×2
• hs544.org×2
• gradyhs.com×2
• google.com×2
• girlsincli.org×2
• geekingout.net×2
• apple.com×2

Linked from (14)

• thebccsa.org×2
• nysalas.org×2
• ps18bronx.com×2
• ps369.org×2
• ps154x.com×2
• hs544.org×2
• seeallacademy.com×2
• ps1x.org×2
• jhs22.com×2
• mshs223.org×2
• csd7.org×2
• loomino.ai×2
• owe-csa.org×1
• manhattanhsdistrict.org×1