https://www.cfisd.net/

Submitted URL:
https://www.cfisd.net/
Report Finished:

Risks Ā· 0 found

  • No classification

Security Headers Ā· 7 found

NameValueSupportInfo
Strict-Transport-Securitymax-age=31536000GoodDeclare that a website is only accessible over a secure connection (HTTPS).

Click to learn more...
X-Frame-OptionsSAMEORIGINGoodIndicate whether a browser should be allowed to render a page in a <frame>, <iframe>, <embed> or <object>.

Click to learn more...
X-Content-Type-OptionsnosniffGoodIndicate that the MIME types advertised in the Content-Type headers should be followed and not be changed.

Click to learn more...
Content-Security-Policyframe-ancestors 'self' *.cfisd.net *.k12insight.com *.mailchi.mp *.smore.com *.google.com *.mailchimp.com; default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: ws: wss: *.cfisd.net *.k12insight.com www.youtube.com *.weglot.com *.juicer.io *.cloudflareinsights.com *.mailchi.mp mailchi.mp mailchimp.com *.audioeye.com *.smore.com *.google.com *.wevideo.com *.formstack.com *.pendo.io pendo.io *.algolia.net *.storage.googleapis.com api.feedback.us.pendo.io apis.google.com app-rsrc.getbee.io app.getbee.io app.pendo.io beefree.io/img-host/ cdn.jsdelivr.net cdn.pendo.io dnjs.cloudflare.com finalsite-dev-res.cloudinary.com fonts.googleapis.com fonts.gstatic.com img.youtube.com loader.getbee.io no-cache.hubspot.com resources.finalsite.net resources.finalsite.dev static.finalsitecdn.com static.juicer.io stats.g.doubleclick.net upload-widget.cloudinary.com widget.cloudinary.com www.google-analytics.com www.googletagmanager.com www.recaptcha.net www.gstatic.com www.google.com/recaptcha/; GoodControl resources the user agent is allowed to load for a given page.

Click to learn more...
Referrer-Policystrict-origin-when-cross-originGoodControl how much referrer information should be included with requests.

Click to learn more...
Clear-Site-Dataā€”GoodControl the data stored by a client browser for their origins.

Click to learn more...
X-Permitted-Cross-Domain-PoliciesnoneGoodControl whether a web client such as Adobe Flash Player or Adobe Acrobat has permission to handle data across domains.

Click to learn more...
Permissions-Policyā€”NewAllow and deny the use of browser features in a document or iframe.

Click to learn more...
Cross-Origin-Embedder-Policyā€”NewConfigure embedding cross-origin resources into the document.

Click to learn more...
Cross-Origin-Opener-Policyā€”NewEnsure a top-level document does not share a browsing context group with cross-origin documents.

Click to learn more...
Cross-Origin-Resource-Policyā€”NewRequest that the browser blocks no-cors cross-origin/cross-site requests to the given resource.

Click to learn more...
X-XSS-Protection1; mode=blockDeprecatedDeprecated. Stops pages from loading when they detect reflected cross-site scripting (XSS) attacks.

Click to learn more...
Feature-Policyā€”DeprecatedDeprecated. Replaced by the Permissions-Policy header.

Click to learn more...
Expect-CTā€”DeprecatedDeprecated. Opt in to reporting and/or enforcement of Certificate Transparency requirements.

Click to learn more...
Public-Key-Pinsā€”DeprecatedDeprecated. Allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates.

Click to learn more...

Security Violations Ā· 10 found

ViolationTypeInfo
Resource
https://www.googletagmanager.com/gtag/js?id=G-CB53G6R8T9&l=dataLayer&cx=c
Description
Refused to connect to 'https://region1.google-analytics.com/g/collect?v=2&tid=G-CB53G6R8T9&gtm=45je4ah0v874542412z871340260za200zb71340260&_p=1729279411397&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101529666~101686685~101823848&cid=206744141.1729279414&ul=en-us&sr=1x1&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&frm=0&pscdl=noapi&_s=1&sid=1729279414&sct=1&seg=0&dl=https%3A%2F%2Fwww.cfisd.net%2F&dt=Home%20-%20Cypress%20Fairbanks%20ISD&en=page_view&_fv=1&_ss=1&ep.debug_mode=true&tfd=3367' because it violates the following Content Security Policy directive: "default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: ws: wss: *.cfisd.net *.k12insight.com www.youtube.com *.weglot.com *.juicer.io *.cloudflareinsights.com *.mailchi.mp mailchi.mp mailchimp.com *.audioeye.com *.smore.com *.google.com *.wevideo.com *.formstack.com *.pendo.io pendo.io *.algolia.net *.storage.googleapis.com api.feedback.us.pendo.io apis.google.com app-rsrc.getbee.io app.getbee.io app.pendo.io beefree.io/img-host/ cdn.jsdelivr.net cdn.pendo.io dnjs.cloudflare.com finalsite-dev-res.cloudinary.com fonts.googleapis.com fonts.gstatic.com img.youtube.com loader.getbee.io no-cache.hubspot.com resources.finalsite.net resources.finalsite.dev static.finalsitecdn.com static.juicer.io stats.g.doubleclick.net upload-widget.cloudinary.com widget.cloudinary.com www.google-analytics.com www.googletagmanager.com www.recaptcha.net www.gstatic.com www.google.com/recaptcha/". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://www.googletagmanager.com/gtag/js?id=G-CB53G6R8T9&l=dataLayer&cx=c
Description
Refused to connect to 'https://region1.google-analytics.com/g/collect?v=2&tid=G-CB53G6R8T9&gtm=45je4ah0v874542412z871340260za200zb71340260&_p=1729279411397&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101529666~101686685~101823848&cid=206744141.1729279414&ul=en-us&sr=1x1&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&frm=0&pscdl=noapi&_s=1&sid=1729279414&sct=1&seg=0&dl=https%3A%2F%2Fwww.cfisd.net%2F&dt=Home%20-%20Cypress%20Fairbanks%20ISD&en=page_view&_fv=1&_ss=1&ep.debug_mode=true&tfd=3367' because it violates the document's Content Security Policy.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://cdn.weglot.com/weglot.min.js
Description
Refused to connect to 'https://cdn-api-weglot.com/translations/slugs?api_key=wg_8004eb3c30015ddc65e4edece1960fad3&language_to=es&v=1722452922' because it violates the following Content Security Policy directive: "default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: ws: wss: *.cfisd.net *.k12insight.com www.youtube.com *.weglot.com *.juicer.io *.cloudflareinsights.com *.mailchi.mp mailchi.mp mailchimp.com *.audioeye.com *.smore.com *.google.com *.wevideo.com *.formstack.com *.pendo.io pendo.io *.algolia.net *.storage.googleapis.com api.feedback.us.pendo.io apis.google.com app-rsrc.getbee.io app.getbee.io app.pendo.io beefree.io/img-host/ cdn.jsdelivr.net cdn.pendo.io dnjs.cloudflare.com finalsite-dev-res.cloudinary.com fonts.googleapis.com fonts.gstatic.com img.youtube.com loader.getbee.io no-cache.hubspot.com resources.finalsite.net resources.finalsite.dev static.finalsitecdn.com static.juicer.io stats.g.doubleclick.net upload-widget.cloudinary.com widget.cloudinary.com www.google-analytics.com www.googletagmanager.com www.recaptcha.net www.gstatic.com www.google.com/recaptcha/". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://cdn.weglot.com/weglot.min.js
Description
Refused to connect to 'https://cdn-api-weglot.com/translations/slugs?api_key=wg_8004eb3c30015ddc65e4edece1960fad3&language_to=es&v=1722452922' because it violates the document's Content Security Policy.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://cdn.weglot.com/weglot.min.js
Description
Refused to connect to 'https://http-intake.logs.datadoghq.com/api/v2/logs?dd-api-key=pub4efaec96ce2494088ba70a2049d58dc3&ddsource=browser' because it violates the following Content Security Policy directive: "default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: ws: wss: *.cfisd.net *.k12insight.com www.youtube.com *.weglot.com *.juicer.io *.cloudflareinsights.com *.mailchi.mp mailchi.mp mailchimp.com *.audioeye.com *.smore.com *.google.com *.wevideo.com *.formstack.com *.pendo.io pendo.io *.algolia.net *.storage.googleapis.com api.feedback.us.pendo.io apis.google.com app-rsrc.getbee.io app.getbee.io app.pendo.io beefree.io/img-host/ cdn.jsdelivr.net cdn.pendo.io dnjs.cloudflare.com finalsite-dev-res.cloudinary.com fonts.googleapis.com fonts.gstatic.com img.youtube.com loader.getbee.io no-cache.hubspot.com resources.finalsite.net resources.finalsite.dev static.finalsitecdn.com static.juicer.io stats.g.doubleclick.net upload-widget.cloudinary.com widget.cloudinary.com www.google-analytics.com www.googletagmanager.com www.recaptcha.net www.gstatic.com www.google.com/recaptcha/". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://cdn.weglot.com/weglot.min.js
Description
Refused to connect to 'https://http-intake.logs.datadoghq.com/api/v2/logs?dd-api-key=pub4efaec96ce2494088ba70a2049d58dc3&ddsource=browser' because it violates the document's Content Security Policy.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://www.googletagmanager.com/gtag/js?id=G-CB53G6R8T9&l=dataLayer&cx=c
Description
Refused to connect to 'https://region1.google-analytics.com/g/collect?v=2&tid=G-CB53G6R8T9&gtm=45je4ah0v874542412za200zb71340260&_p=1729279411397&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101529666~101686685~101823848&cid=206744141.1729279414&ul=en-us&sr=1x1&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&frm=0&pscdl=noapi&_eu=AEA&sid=1729279414&sct=1&seg=0&dl=https%3A%2F%2Fwww.cfisd.net%2F&dt=Home%20-%20Cypress%20Fairbanks%20ISD&_s=2&tfd=11820' because it violates the following Content Security Policy directive: "default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: ws: wss: *.cfisd.net *.k12insight.com www.youtube.com *.weglot.com *.juicer.io *.cloudflareinsights.com *.mailchi.mp mailchi.mp mailchimp.com *.audioeye.com *.smore.com *.google.com *.wevideo.com *.formstack.com *.pendo.io pendo.io *.algolia.net *.storage.googleapis.com api.feedback.us.pendo.io apis.google.com app-rsrc.getbee.io app.getbee.io app.pendo.io beefree.io/img-host/ cdn.jsdelivr.net cdn.pendo.io dnjs.cloudflare.com finalsite-dev-res.cloudinary.com fonts.googleapis.com fonts.gstatic.com img.youtube.com loader.getbee.io no-cache.hubspot.com resources.finalsite.net resources.finalsite.dev static.finalsitecdn.com static.juicer.io stats.g.doubleclick.net upload-widget.cloudinary.com widget.cloudinary.com www.google-analytics.com www.googletagmanager.com www.recaptcha.net www.gstatic.com www.google.com/recaptcha/". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://www.googletagmanager.com/gtag/js?id=G-CB53G6R8T9&l=dataLayer&cx=c
Description
Refused to connect to 'https://region1.google-analytics.com/g/collect?v=2&tid=G-CB53G6R8T9&gtm=45je4ah0v874542412za200zb71340260&_p=1729279411397&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101529666~101686685~101823848&cid=206744141.1729279414&ul=en-us&sr=1x1&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&frm=0&pscdl=noapi&_eu=AEA&sid=1729279414&sct=1&seg=0&dl=https%3A%2F%2Fwww.cfisd.net%2F&dt=Home%20-%20Cypress%20Fairbanks%20ISD&_s=2&tfd=11820' because it violates the document's Content Security Policy.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://www.googletagmanager.com/gtag/js?id=G-CB53G6R8T9&l=dataLayer&cx=c
Description
Refused to connect to 'https://region1.google-analytics.com/g/collect?v=2&tid=G-CB53G6R8T9&gtm=45je4ah0v874542412za200zb71340260&_p=1729279411397&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101529666~101686685~101823848&cid=206744141.1729279414&ul=en-us&sr=1x1&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&frm=0&pscdl=noapi&_eu=AEA&_s=3&sid=1729279414&sct=1&seg=0&dl=https%3A%2F%2Fwww.cfisd.net%2F&dt=Home%20-%20Cypress%20Fairbanks%20ISD&en=video_progress&ep.debug_mode=true&epn.video_current_time=7&epn.video_duration=27&epn.video_percent=25&ep.video_provider=youtube&ep.video_title=CFISD%20Summer%202024&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Flist%3DTLGGwaIpNhh-NpIxODEwMjAyNA%26v%3DKvzLja0aDuE&ep.visible=true&tfd=18688' because it violates the following Content Security Policy directive: "default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: ws: wss: *.cfisd.net *.k12insight.com www.youtube.com *.weglot.com *.juicer.io *.cloudflareinsights.com *.mailchi.mp mailchi.mp mailchimp.com *.audioeye.com *.smore.com *.google.com *.wevideo.com *.formstack.com *.pendo.io pendo.io *.algolia.net *.storage.googleapis.com api.feedback.us.pendo.io apis.google.com app-rsrc.getbee.io app.getbee.io app.pendo.io beefree.io/img-host/ cdn.jsdelivr.net cdn.pendo.io dnjs.cloudflare.com finalsite-dev-res.cloudinary.com fonts.googleapis.com fonts.gstatic.com img.youtube.com loader.getbee.io no-cache.hubspot.com resources.finalsite.net resources.finalsite.dev static.finalsitecdn.com static.juicer.io stats.g.doubleclick.net upload-widget.cloudinary.com widget.cloudinary.com www.google-analytics.com www.googletagmanager.com www.recaptcha.net www.gstatic.com www.google.com/recaptcha/". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://www.googletagmanager.com/gtag/js?id=G-CB53G6R8T9&l=dataLayer&cx=c
Description
Refused to connect to 'https://region1.google-analytics.com/g/collect?v=2&tid=G-CB53G6R8T9&gtm=45je4ah0v874542412za200zb71340260&_p=1729279411397&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101529666~101686685~101823848&cid=206744141.1729279414&ul=en-us&sr=1x1&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&frm=0&pscdl=noapi&_eu=AEA&_s=3&sid=1729279414&sct=1&seg=0&dl=https%3A%2F%2Fwww.cfisd.net%2F&dt=Home%20-%20Cypress%20Fairbanks%20ISD&en=video_progress&ep.debug_mode=true&epn.video_current_time=7&epn.video_duration=27&epn.video_percent=25&ep.video_provider=youtube&ep.video_title=CFISD%20Summer%202024&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Flist%3DTLGGwaIpNhh-NpIxODEwMjAyNA%26v%3DKvzLja0aDuE&ep.visible=true&tfd=18688' because it violates the document's Content Security Policy.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...

Certificates Ā· 12 found

SubjectIssue dateExpiry date
www.cfisd.netSep 13, 2024, 16:56:13Dec 12, 2024, 16:56:12
cdn.weglot.comAug 29, 2024, 18:29:05Nov 27, 2024, 18:29:04
upload.video.google.comSep 30, 2024, 15:09:59Dec 23, 2024, 15:09:58
*.google-analytics.comSep 30, 2024, 14:36:15Dec 23, 2024, 14:36:14
cloudflareinsights.comSep 3, 2024, 08:38:23Dec 2, 2024, 08:38:22
*.gstatic.comSep 30, 2024, 15:09:59Dec 23, 2024, 15:09:58
san.cloudinary.comOct 9, 2024, 18:39:34Jan 7, 2025, 18:39:33
*.google.comSep 30, 2024, 14:36:26Dec 23, 2024, 14:36:25
wsmcdn.audioeye.comOct 8, 2024, 02:18:55Jan 6, 2025, 02:18:54
wsv3cdn.audioeye.comSep 12, 2024, 09:19:30Dec 11, 2024, 09:19:29