villageofsgfny.gov

HTML metadata

Technology

CDN

Cloudflare

CMS

WordPress

jQuery

3.2.1 known XSS (<3.5)

Analytics

• Google Tag Manager

Third-party hosts loaded (5)

• cdnjs.cloudflare.com×4
• ajax.googleapis.com×2
• www.googletagmanager.com×2
• calendar.google.com×1
• www.google.com×1

Social

• facebook

Contact

Phone

• (518) 793-1455

DNS records live

NS

• fred.ns.cloudflare.com
• gail.ns.cloudflare.com

MX

• 0 villageofsgfny-gov.mail.protection.outlook.com

Verified for

• Google
• Microsoft 365

Email authentication weak

SPF

v=spf1 a mx ip4:172.96.167.194 include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

not published

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtkgDGTj5FkmzNMlgNYe3aS3y313Zxvxn+q5gCGN3QblZv9BLkT0mHbd4xNqIlsjemPgdyR5jIikro…
• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ2+iJ3usVoIVo3bZ76wvyQJwSFz4zwFKKSEY0aAUi9PTR5F424BYFWIexyLku78kn2DhO46J5CsfD…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqCFftjfDTEWcbcXCMUAJdjbM/QTWiqOcSUjbzUwHFxCg/SIs994xjA4480qURgVx+Ve09OBjddspv…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://villageofsgfny.gov/

present

• referrer-policy

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Permissions Policy

Links to (23)

• townofmoreau.org×1
• skiwestmountain.com×1
• sharepoint.com×1
• sgfny.com×1
• sgfcsd.org×1
• sgfchamber.com×1
• sgfallssd.org×1
• saratoga.org×1
• saratoga-springs.org×1
• moreaucommunitycenter.org×1
• goto.com×1
• goremountain.com×1
• google.com×1
• fwhmuseum.com×1
• fortwilliamhenry.com×1
• fort-ticonderoga.org×1
• facebook.com×1
• ecode360.com×1
• crandalllibrary.org×1
• cityofglensfalls.com×1
• chapmanmuseum.org×1
• boltonhistorical.org×1
• agftc.org×1