classictrak.com

HTML metadata

Technology

Server

Apache

CMS

WordPress 5.5.18 legacy (latest 7.0)

jQuery

1.7.2 known XSS (<3.5)

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (6)

• fonts.googleapis.com×3
• maps.googleapis.com×2
• netdna.bootstrapcdn.com×2
• gmpg.org×1
• s.w.org×1
• www.googletagmanager.com×1

Social

• linkedin

Contact

Phone

• 800.930.4633

Registration

Registrar

DNC Holdings, Inc.

Created

2003-06-02

Expires

2028-06-02 730 days left

Updated

2023-04-17

Name servers

• ns.inmotionhosting.com
• ns2.inmotionhosting.com

DNS records live

NS

• ns1.inmotionhosting.com
• ns2.inmotionhosting.com

MX

• 0 west.smtp.mx.exch083.serverdata.net
• 10 east.smtp.mx.exch083.serverdata.net

TXT

• crlqm6gmuee9iiis13t6rrbq9d

Email authentication weak

SPF

v=spf1 ip4:173.231.220.112 ip4:172.81.116.77 include:spf.intermedia.net include:spf.constantcontact.com ~all

softfail (~all)

DMARC

not published

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxNeof2ICKPYK/m5l0YjYZkHlhPHeAQS2s/c87UQEebys4RUQ7RW3OPT5VUQjUOKk18ZnuuiLcRKus…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzRhZS5tM8873fyQZ5uAAcRr6YbbOinNXd1BjoeIMkd7a1c6nYsl8Til4HxocQPfIDQjjjTjEmXryFdJ7n…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDzBO0HGjCSri5I1cAD+8dmEDJTaMn7iTvwvLOkSwipPu30wTtPcTqQsBnitKIN0fZm7UwF3FX8shHlBbrON7hbUZ…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.classictrak.com/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (3)

• linkedin.com×1
• launchpadonline.com×1
• isolvedhire.com×1

Linked from (2)

• rvda.org×1
• phltd.com×1