bigrig.app

HTML metadata

Technology

Server

nginx

CMS

WordPress

Third-party hosts loaded (2)

• fonts.bunny.net×4
• gmpg.org×1

Social

• facebook
• instagram
• twitter
• linkedin
• youtube

Contact

Phone

• +18557442223
• +14844942857
• +19013505073
• +14406442524
• +17204085012

DNS records live

NS

• ns-cloud-b1.googledomains.com
• ns-cloud-b2.googledomains.com
• ns-cloud-b3.googledomains.com
• ns-cloud-b4.googledomains.com

MX

• 1 aspmx.l.google.com
• 10 alt3.aspmx.l.google.com
• 10 alt4.aspmx.l.google.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

TXT

• google-site-verification=T7akOokS-_WYhLD8kpifgvdrwNccmhA7YQB8K6LBkCE

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTzubx+AqJAnHXPzCI6GFFr6Vk+LknAmPyJ7TUaaV+FHHgRMp0zLwuYU0FiXShEboE4PrZNLqpPdek…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDjVy+00sYuIiK3UTW3rVyQJd8FAY1pUIac556R0ej336P7ixOSay/TAP4Mc/3wHrp98R4qaTdK2M/XweM…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KDBc6EJddao1SpR2dgV59vYvP17q+diJj5Rcz5o+L8UQbBV5jFp06ZC4dQ85iffsvQW5MEQpqgMtkV6Tt…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://bigrig.app/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (7)

• apple.com×2
• facebook.com×2
• google.com×2
• instagram.com×2
• linkedin.com×2
• twitter.com×2
• youtube.com×2

Linked from (1)

• kcrisefund.com×2