trauma-informed.uk

HTML metadata

Technology

Server

LiteSpeed

CMS

Joomla

PHP

8.2.31 security-only

jQuery

1.12.4 known XSS (<3.5)

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Social widgets

• YouTube Embed

Third-party hosts loaded (6)

• fonts.googleapis.com×2
• www.googletagmanager.com×2
• www.youtube.com×2
• embed.typeform.com×1
• www.google.com×1
• www.traumainformedschools.co.uk×1

Contact

Email

• info@traumainformedschools.co.uk

DNS records live

NS

• ns1.stackdns.com
• ns2.stackdns.com
• ns3.stackdns.com
• ns4.stackdns.com

MX

• 10 mx.stackmail.com

Email authentication weak

SPF

v=spf1 +ip4:3.11.188.227 +include:relay.mailchannels.net +include:spf.stackmail.com +a +mx -all

strict (-all)

DMARC

not published

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKMsxvyKJN2nVjOpJeLDzbUTIEjL5hm8ddl2V+bOIHYQRdTivyOF5hhtbi6mEHEKQZ4AMDVtKLw565…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.trauma-informed.uk/

present

• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing Referrer Policy
• missing Permissions Policy

Links to (38)

• yyd.org.uk×1
• youthendowmentfund.org.uk×1
• wordpress.com×1
• worcestershire.gov.uk×1
• westst.org.uk×1
• virtualschoolrotherham.org.uk×1
• valeofglamorgan.gov.uk×1
• uel.ac.uk×1
• tnlcommunityfund.org.uk×1
• thelearningforlifepartnership.com×1
• stjosephmat.org.uk×1
• southyorkshirefutures.co.uk×1
• shu.ac.uk×1
• plymouth.gov.uk×1
• oldham.gov.uk×1
• npt.gov.uk×1
• novus.ac.uk×1
• norfolk.gov.uk×1
• learnsheffield.co.uk×1
• learningat.uk×1
• lea.kent.sch.uk×1
• ipsos.com×1
• identitywebdesign.com×1
• headstartkernow.org.uk×1
• harrisfederation.org.uk×1
• firstfederation.org×1
• fcat.org.uk×1
• eventbrite.com×1
• eventbrite.co.uk×1
• doncaster.gov.uk×1
• devon.gov.uk×1
• cornwall.gov.uk×1
• connectacademytrust.co.uk×1
• bury.gov.uk×1
• bristol.gov.uk×1
• astreaacademytrust.org×1
• aspireacademytrust.org×1
• anglesey.gov.uk×1