Skip to main content

Is openedmb.ca a Scam? Security Check Results - Open Education Manitoba Reviews

openedmb.ca favicon

Is openedmb.ca Safe? Security Analysis for Open Education Manitoba

Check if openedmb.ca is a scam or legitimate. Free security scan and reviews.

EducationCanadasmall
WordPress 6.8.2Yoast SEO pluginjQuery 3.7.1Google Tag ManagerGoogle Analytics+4 more
Analyzed 9/7/2025Completed 2:06:04 PM
58
Security Score
MEDIUM RISK

AI Summary

Open Education Manitoba is a non-profit initiative dedicated to increasing accessibility to post-secondary education in Manitoba through the promotion and support of Open Educational Resources (OERs). The organization provides resources and guidance for faculty and students to adopt, adapt, review, and create open textbooks under Creative Commons licensing, thereby reducing educational costs and expanding access. The website serves as a hub for these resources and advocacy efforts, positioning itself as a regional leader in open education within Manitoba. Technically, the website is built on WordPress using the Avada theme and several plugins including Yoast SEO, Google Analytics, and Google Tag Manager. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. However, there are gaps in privacy compliance, notably the absence of privacy and cookie policies and no visible cookie consent mechanism. Security practices are basic with HTTPS enabled and domain protection statuses set, but DNSSEC is not enabled and security headers are not detected. From a security perspective, the site shows a moderate security posture with no critical vulnerabilities detected in the provided data. The WHOIS data indicates a privacy-protected registration consistent with the organization's non-profit status and domain age aligns with the business history. No WAF or blocking mechanisms are detected, allowing full content access. Overall, Open Education Manitoba presents a trustworthy and professional online presence with strong educational content and community focus. To enhance trust and compliance, it is recommended to implement comprehensive privacy and cookie policies, improve security headers, and provide explicit incident response and vulnerability disclosure information.

Detected Technologies

WordPress 6.8.2Yoast SEO pluginjQuery 3.7.1Google Tag ManagerGoogle AnalyticsWPFront Notification Bar pluginWP RSS Retriever pluginAvada ThemeFusion Builder

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Open Education Manitoba operates in the education and non-profit sectors, targeting post-secondary students and faculty in Manitoba. Its competitive advantage lies in its regional focus and partnership with Campus Manitoba and the Province of Manitoba, providing authoritative and localized open educational resources. The business model is centered on advocacy and resource provision rather than commercial revenue. Growth indicators include ongoing content updates, community engagement through adoption and review programs, and integration with provincial educational initiatives. The partnership ecosystem includes Campus Manitoba and government entities, enhancing credibility and reach. Strategic observations suggest opportunities to expand digital presence and compliance to strengthen market position and user trust.

Extracted Contact Information

Marketing Intelligence Data

Phone Numbers (1)

204*******

Security Posture Analysis

Comprehensive Security Assessment

The website maintains a moderate security maturity level with HTTPS enforced and domain statuses that prevent unauthorized transfers or deletions. However, the lack of DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options indicates room for improvement. No incident response or security policy information is published, which could hinder rapid response to security events. The absence of vulnerability disclosure or security.txt files limits transparency. Data protection practices are not explicitly detailed, and cookie consent mechanisms are missing, posing compliance risks under GDPR and similar regulations. Overall, the security culture appears basic but functional, with recommendations to enhance policies, headers, and compliance documentation.

Strategic Recommendations

Priority Actions for Security Improvement

1

Enable DNSSEC on the domain to improve DNS security and prevent spoofing.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Open Education Manitoba

Description:

Open Education Manitoba is a non-profit initiative focused on promoting open access to education in Manitoba by guiding post-secondary community members in using Open Educational Resources (OERs) under Creative Commons licensing to increase accessibility and affordability of education.

Key Services:
Providing access to open textbooksSupporting adoption, adaptation, review, and creation of open textbooksAdvocacy and education about open educational resources
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
WordPress 6.8.2Yoast SEO pluginjQuery 3.7.1Google Tag ManagerGoogle AnalyticsWPFront Notification Bar pluginWP RSS Retriever pluginAvada ThemeFusion Builder
Frameworks:
WordPress CMSAvada Theme Framework
Platforms:
WordPress
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
75/100
Best Practices:
  • HTTPS enabled
  • Use of clientDeleteProhibited, clientTransferProhibited, clientUpdateProhibited domain statuses

Analytics & Tracking

Services:
Google AnalyticsGoogle Tag Manager
Tracking Level:moderate
Privacy Compliance:poor

Advertising & Marketing

Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is a well-structured educational resource focused on open education in Manitoba.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

55/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

35/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

Third-party services without privacy policy

HIGH

Detected services: Google Analytics, LinkedIn

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

40/100
Score

No SPF record found

HIGH

SPF helps prevent email spoofing

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

62/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 46 days

Mixed Content Detected

MEDIUM

2 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

Domain Registration Details

Domain Age
9 years(mature)
Expiry Risk
low(122 days)
Protection Level
strongDNSSEC OFF
Suspicious Indicators Detected
  • Privacy/proxy registration detected

DNS Records

A Records:142.13.155.84
Name Servers:
ns21.domaincontrol.com
ns22.domaincontrol.com
SOA:Serial: 2024092700, TTL: 600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:143ms

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on a modern WordPress platform using the Avada theme and several well-known plugins for SEO, notifications, and RSS feed integration. The use of Google Analytics and Tag Manager indicates a moderate level of digital marketing sophistication. Performance is moderate with some optimization evident, and mobile responsiveness is good. However, accessibility features are basic and could be improved. The site lacks advanced security configurations such as DNSSEC and security headers. The technical debt appears manageable but addressing privacy compliance and security best practices would reduce risk and improve user trust.
Analyze Another Website