yoots.org

HTML metadata

Technology

Server

nginx

CMS

WordPress

jQuery

3.7.1

Fonts

• Google Fonts

Social widgets

• Vimeo Embed

Third-party hosts loaded (4)

• fonts.googleapis.com×3
• player.vimeo.com×2
• widgets.givebutter.com×1
• widgets.guidestar.org×1

DNS records live

NS

• ns47.domaincontrol.com
• ns48.domaincontrol.com

MX

• 1 aspmx.l.google.com
• 10 aspmx2.googlemail.com
• 10 aspmx3.googlemail.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

Verified for

• Google
• Microsoft 365

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4opWHDs8vtcudMRGee7g5Uhq+6EZy2sfwuCg51lPcgKSW3g+5wmGoDL0K7ACSUkEkS2ut1zrBSNXE70m34…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKLenvFyOQ/EsJud7FojKD4GhTSzt34BgtFVkCACjIeiO2l1m2r5S6K8/pu2a+BMHujGsjd7jOkNdFqrNP…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://yoots.org/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (2)

• guidestar.org×1
• brandkinddesign.com×1

Linked from (1)

• richmondcaoutdoors.org×1