shastaess.org

HTML metadata

Technology

CDN

Cloudflare

Analytics

• Cloudflare Insights
• Google Tag Manager

Third-party hosts loaded (4)

• www.googletagmanager.com×2
• cdn.weglot.com×1
• resources.finalsite.net×1
• static.cloudflareinsights.com×1

Social

• facebook
• youtube
• instagram
• twitter

Contact

Phone

• 530-225-0255

DNS records live

NS

• dns1.registrar-servers.com
• dns2.registrar-servers.com

MX

• 10 eforward1.registrar-servers.com
• 10 eforward2.registrar-servers.com
• 10 eforward3.registrar-servers.com
• 15 eforward4.registrar-servers.com
• 20 eforward5.registrar-servers.com

Email authentication strong

SPF

v=spf1 include:_spf.google.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; rua=mailto:dmarcrua@shastacoe.org; ruf=mailto:dmarcruf@shastacoe.org; fo=1; pct=100; adkim=s; aspf=s;

policy: reject (enforced) · sp=reject

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbqI9lHlci6grpJxfMhrZPKvg25GdsPkToRzDp/zpMom9AZwiotXE1TbBvfFykcn1R4Ar9kKL0sr6k…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.shastaess.org/

present

• strict-transport-security
• content-security-policy
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing Permissions Policy

Links to (21)

• youtube.com×1
• twitter.com×1
• teachshasta.org×1
• shastahealth.org×1
• shastacoe.org×1
• reachhighershasta.com×1
• northstatetogether.org×1
• kixe.org×1
• instagram.com×1
• helpmegrowshasta.com×1
• healthyshasta.org×1
• google.com×1
• first5shasta.org×1
• finalsitecdn.com×1
• finalsite.com×1
• farnorthernrc.org×1
• facebook.com×1
• earlyfoundationsca.com×1
• dignityhealth.org×1
• chemicalpeople.org×1
• cacollegeguidance.org×1

Linked from (1)

• shastacoe.org×1