tzhao.io

HTML metadata

Technology

CDN

Fastly

Server

GitHub.com

Third-party hosts loaded (2)

• cdn.clustrmaps.com×1
• cdnjs.cloudflare.com×1

Social

• github
• linkedin

DNS records live

NS

• ns-cloud-d1.googledomains.com
• ns-cloud-d2.googledomains.com
• ns-cloud-d3.googledomains.com
• ns-cloud-d4.googledomains.com

MX

• 10 mx01.mail.icloud.com
• 10 mx02.mail.icloud.com

TXT

• apple-domain=esZ3jRqSiG17iAH8

Email authentication weak

SPF

v=spf1 include:icloud.com ~all

softfail (~all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://tzhao.io/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (15)

• acm.org×1
• arxiv.org×1
• computer.org×1
• doi.org×1
• github.com×1
• github.io×1
• google.com×1
• ieee.org×1
• kdd.org×1
• linkedin.com×1
• meng-jiang.com×1
• openreview.net×1
• shenlanxueyuan.com×1
• siam.org×1
• submittable.com×1