cbac.com

HTML metadata

Title: Trusted Auto Repair & Maintenance Nationwide| Christian Brothers Automotive
Description: Experience the Nice Difference® at Christian Brothers Automotive. Our ASE-certified technicians provide honest, transparent auto repair and maintenance services across 310+ locations.
Language: en
Canonical: https://www.cbac.com/

Open Graph

url: https://www.cbac.com/
title: Auto Repair and Maintenance Shop
site name: Christian Brothers Automotive
description: At Christian Brothers Automotive, our mission is simple: to create an uncommonly great experience for customers in need of auto service and repair. Since 1982, that's exactly what our team of auto repair professionals has been doing at facilities all over the country.

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights

Cookie consent

Osano

Fonts

Google Fonts

Third-party hosts loaded (7)

d12yp66odzcfr0.cloudfront.net×12
analytics.scorpion.co×1
cmp.osano.com×1
fonts.googleapis.com×1
fonts.gstatic.com×1
scorpionconnect.scorpion.co×1
static.cloudflareinsights.com×1

Social

Registration

Registrar

Cloudflare, Inc.

Created

1996-08-09

Expires

2026-08-08 81 days left

Updated

2025-07-09

Name servers

carlos.ns.cloudflare.com
walk.ns.cloudflare.com

DNS records live

NS

carlos.ns.cloudflare.com
walk.ns.cloudflare.com

MX

10 mx2-us1.ppe-hosted.com
20 mx1-us1.ppe-hosted.com

TXT

Show 24 TXT records

2524DF1F49
EDB6FBF0DD
MS=C2FC834B8A4235B067B2538EC1B06F553AEC39D1
apple-domain-verification=Cpzr7GXAfhCw4HCw
_0g1et2kjua2p6raxh864q630tjzhn0y
google-site-verification=URc4A27z-emLhIvV-Qvj_SCrnBr7R1ZsPl57qE1nR_E
xz2svpsstggz9k75zzctfhxzjz1jv9xj
lf1y8kmsrn9ddp1v3r2v56g2zghk9h2w
google-site-verification=Ve7UYh4DttT5GxWzd1J4iLI2xaI9lMWJKj4C2dKIrCI
google-site-verification=gXPL8vg90B3PGuOTUIZE0HryRhgFE6a5B3cTGEYgoEk
_zyzfooajqr24kgft9pw9h20gdrha3fu
_jrpd2o3gazafb7gntptdr50g0qz60mr
google-site-verification=wZKei4HbCaFwLhr9YZc618IL4uSPMCws6c2d6ZfCXFo
_mb73mhasapokc9m8xji7s2d44hfo0ue
20hhtyg9yttnl8vblhzj5239rnbxs28z
ZOOM_verify_s9ZAgCYMSnGOwamURi4-8w
docusign=676f2ee8-0451-405d-bf0b-030d1bac8316
_xl5tsepiz2t5xncz04vjc5lo0hwwa59
_mwhcqtgga1giblkctkh7ydklwlx6e78
MS=ms36348262
dell-technologies-domain-verification=cbac.com_aa0cae9d-9075-4216-9346-de1b69772275_1741964917
anthropic-domain-verification-32184b=7AWkJ11foWpgqWhp8Q9xLwupi
_5hihujz4z6xgjzw1z5bxdaxh84qszlw
_y7ad3zm0noqgymwfaghgy28zfey2rew

Email authentication strong

SPF

v=spf1 ip4:72.20.159.196 include:spf.protection.outlook.com a:dispatch-us.ppe-hosted.com include:servers.mcsv.net include:mailgun.org include:u45023249.wl250.sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:cedc238d734345b6b77bcc5947293ac1@dmarc-reports.cloudflare.net;

policy: quarantine

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUqf7dnMo+xL0mf1LMaD9PngCY0bqx4afd39YLvehY4bF+JspBZSi/9z7Yp15Gly4kFFcqHM33PRiqwILY…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6qSoubsjybKUFnWmRHuKAgmSJb4ledCKwG9uwO2TS7RlbZtd56I6x2KwHJvV19nw8qBz+EZEMYJS/Il2s…

selectors probed

Certificate (current)

WE1

from 2026-04-21 to 2026-07-20

Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.cbac.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src * blob: data: cid:; img-src * data: blob: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline', font-src * data:
strict-transport-security: max-age=63072000; includeSubDomains; preload