whsbopenday.co.uk

HTML metadata

Title

WHSB Virtual Tour

Language

en

Open Graph

url

https://whsbopenday.co.uk

title

Westcliff High School for Boys - Virtual Tour

site name

Westcliff High School for Boys - Virtual Tour

description

Welcome to the Westcliff High School for Boys Virtual Tour. We hope you enjoy looking around our school, meeting some of our pupils, students and teachers as well as seeing what goes on after school!

Technology

Server

LiteSpeed

PHP

7.4.33 end of life

jQuery

1.11.1 known XSS (<3.5)

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Social widgets

• YouTube Embed

Third-party hosts loaded (5)

• fonts.googleapis.com×2
• code.jquery.com×1
• whsb.essex.sch.uk×1
• www.googletagmanager.com×1
• www.youtube.com×1

Social

• twitter
• facebook

DNS records live

NS

• ns1.hostns.io
• ns2.hostns.io

MX

• 0 whsbopenday.co.uk

Email authentication weak

SPF

v=spf1 ip4:91.204.209.24 ip4:109.70.148.58 ip4:81.19.215.8 +a +mx +include:relay.mailchannels.net include:spf.hostns.io include:spf.hostns.io -all

strict (-all)

DMARC

not published

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AIKr8cziB9W+VkXQw01o9t/MKIVz1BLwCZ+1Rbjj9RrwSdzzKmGXQaU1+o3OW4Wk7RezLybpREPM9…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://whsbopenday.co.uk/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (3)

• whsb.essex.sch.uk×1
• twitter.com×1
• facebook.com×1

Linked from (1)

• whsb.essex.sch.uk×1