indexo.dev

commstbk.com

.com crawl

First seen 2026-05-11 · Last seen 2026-05-16 · ok HTTP/1.1 200 2545 ms crawled 2026-05-17

US · 18.165.140.31 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

sector finance type homepage

HTML metadata

Title
Community State Bank of Rock Falls | Northwest Illinois
Language
en

Technology

CDN
Amazon CloudFront
Server
Apache
CMS
Joomla
Fonts
  • Font Awesome

Third-party hosts loaded (2)

  • secure2.fundsxpress.com×1
  • use.fontawesome.com×1

Contact

Email

Registration

Registrar
CSC Corporate Domains, Inc.
Created
2000-04-03
Expires
2027-04-03 319 days left
Updated
2026-03-30
Name servers
  • ns-1186.awsdns-20.org
  • ns-1800.awsdns-33.co.uk
  • ns-509.awsdns-63.com
  • ns-658.awsdns-18.net

DNS records live

NS
  • ns-1186.awsdns-20.org
  • ns-1800.awsdns-33.co.uk
  • ns-509.awsdns-63.com
  • ns-658.awsdns-18.net
MX
  • 10 mx1-us1.ppe-hosted.com
  • 10 mx2-us1.ppe-hosted.com
TXT
Show 6 TXT records
  • rfiq5dplru260lbv2tpt8g5oma
  • s9nbd97fij1l32e79ak2tc3mlj
  • 3b36a155-59f3-43a4-a9ad-4e6c3506370e
  • MS=EF1D1C12A92C18C1EC4D9298281AD2A951013D1A
  • gjfrlsa1l5nvpq45v507pb7fcb
  • ppe-e5e246723c2da8ac6b6f17a94e07e4a0aa896d22

Email authentication partial

SPF
v=spf1 mx a include:spf.protection.outlook.com include:spfref.jackhenry.com ip4:66.254.204.7/32 ip4:173.84.2.228/32 include:amazonses.com include:gateways.firstdata.com a:monitor.ensenta.com include:spf.cashedge.com ip4:207.67.42.11 a:dispatch-us.ppe-hosted.com include:commstbk-com.spf.smtp25.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; fo=1; rua=mailto:81181246@mxtoolbox.dmarc-report.com; ruf=mailto:81181246@forensics.dmarc-report.com
policy: none (monitoring only)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrggsopJnO9FbJGue9bn4I9uoPxxry4+ljYH1UI8pD7DMZkZRhxECvgu6GUi/blEL+3TZ/y6qe062G…
selectors probed

Certificate (current)

Amazon RSA 2048 M04
from 2025-11-22 to 2026-12-21
Expires in 216 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://commstbk.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self'; frame-src 'self' *.fundsxpress.com *.apiture.com *.google.com; default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.fundsxpress.com *.apiture.com *.google.com *.googletagmanager.com *.gstatic.com *.google- analytics.com *.googleapis.com *.jsdelivr.net https://www.fdic.gov *.fontawesome.com; style-src 'self' 'unsafe-inline' *.typekit.net *.googleapis.com *.jsdelivr.net; font-src 'self' data: *.typekit.net *.jsdelivr.net *.gstatic.com; connect-src 'self' *.googleapis.com *.google.com; img-src 'self' data: 'unsafe-inline' *.googleapis.com *.gstatic.com *.printable.com;
strict-transport-security
max-age=31536000; includeSubdomains; preload

Links to (2)

Linked from (2)