stjohnswinchester.co.uk

HTML metadata

Technology

Server

nginx

CMS

WordPress

jQuery

3.7.1

Analytics

• Google Tag Manager

Fonts

• Adobe Fonts

Third-party hosts loaded (3)

• ajax.googleapis.com×2
• use.typekit.net×2
• www.googletagmanager.com×1

Social

• facebook
• instagram

Contact

Email

• office@stjohnswinchester.co.uk

Phone

• 01962 854 226

DNS records live

NS

• ns1121.ui-dns.biz
• ns1121.ui-dns.com
• ns1121.ui-dns.de
• ns1121.ui-dns.org

MX

• 5 mx1-eu1.ppe-hosted.com
• 50 mx2-eu1.ppe-hosted.com

TXT

• ppe-2d766f3544015727a35388216e2cb93bc5331c69
• v131civh25jkcqg5e2qofucqbf

Verified for

• Google
• Microsoft 365

Email authentication partial

SPF

v=spf1 a:dispatch-eu.ppe-hosted.com include:spf.protection.outlook.com include:spf.mailroute.net ip4:92.27.166.49 -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmidqDF/0vL+mc5/o08DV6mubGiAfrPiLZDukwwz2diLqahEOijWqAQ1LQwh62yeTb81CuuSusB9UkCTeeFq…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://stjohnswinchester.co.uk/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (11)

• winchester.gov.uk×1
• winchester.ac.uk×1
• propertyredress.co.uk×1
• nationalcareforum.org.uk×1
• nalw.org.uk×1
• instagram.com×1
• homecareassociation.org.uk×1
• facebook.com×1
• dementiauk.org×1
• dementiafriends.org.uk×1
• cqc.org.uk×1

Linked from (1)

• legacyactionweek.com×1