shastaecs.org

HTML metadata

Technology

CDN

Cloudflare

Analytics

• Cloudflare Insights
• Google Tag Manager

Third-party hosts loaded (4)

• www.googletagmanager.com×2
• cdn.weglot.com×1
• resources.finalsite.net×1
• static.cloudflareinsights.com×1

Social

• facebook
• instagram
• linkedin
• youtube

Contact

Phone

• (530) 225-2999
• (530) 225-2970715
• (530) 529-3131
• (530) 529-6631

DNS records live

NS

• dns1.registrar-servers.com
• dns2.registrar-servers.com

MX

• 10 eforward1.registrar-servers.com
• 10 eforward2.registrar-servers.com
• 10 eforward3.registrar-servers.com
• 15 eforward4.registrar-servers.com
• 20 eforward5.registrar-servers.com

Email authentication weak

SPF

v=spf1 include:spf.efwd.registrar-servers.com ~all

softfail (~all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.shastaecs.org/

present

• strict-transport-security
• content-security-policy
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing Permissions Policy

Links to (23)

• youtube.com×1
• shastaheadstart.org×1
• shastacoe.org×1
• sfymca.org×1
• reachhighershasta.com×1
• mychildcareplan.org×1
• mycareconnect.io×1
• linkedin.com×1
• kixe.org×1
• instagram.com×1
• imaginationlibrary.com×1
• helpmegrowshasta.com×1
• healthyshasta.org×1
• google.com×1
• first5shasta.org×1
• finalsitecdn.com×1
• finalsite.net×1
• finalsite.com×1
• farnorthernrc.org×1
• facebook.com×1
• edjoin.org×1
• earlyfoundationsca.com×1
• bankcornerstone.com×1

Linked from (1)

• shastacoe.org×1