yugntruf.org

HTML metadata

Technology

Server

nginx

CMS

WordPress

Third-party hosts loaded (3)

• gmpg.org×1
• www.google.com×1
• www.paypal.com×1

Social

• facebook
• twitter
• instagram
• youtube

Contact

Phone

• 212.796.5782

Registration

Registrar

GoDaddy.com, LLC

Created

1998-07-15

Expires

2033-07-14 2612 days left

Updated

2024-07-14

Name servers

• ns1.dreamhost.com
• ns2.dreamhost.com
• ns3.dreamhost.com

DNS records live

NS

• ns1.dreamhost.com
• ns2.dreamhost.com
• ns3.dreamhost.com

MX

Show 7 MX records

• 10 aspmx.l.google.com
• 20 alt1.aspmx.l.google.com
• 20 alt2.aspmx.l.google.com
• 30 aspmx2.googlemail.com
• 30 aspmx3.googlemail.com
• 30 aspmx4.googlemail.com
• 30 aspmx5.googlemail.com

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:yvokh@yugntruf.org

policy: none (monitoring only)

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC4Jp3xH6JFJEgmn1ZG7FsUVG+is4ydfsIFMgfMQSPgDw2J/vX/bWgwl2tkjd6F2WaUz2fApAhiCsj…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.yugntruf.org/

present

• strict-transport-security
• content-security-policy
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• CSP allows unsafe inline scripts/styles
• CSP uses wildcard sources
• missing Permissions Policy

Links to (6)

• facebook.com×2
• flickr.com×2
• instagram.com×2
• twitter.com×2
• youtube.com×2
• zazzle.com×2

Linked from (1)

• yiddishnewyork.com×2