crossriverpartnership.org

HTML metadata

Technology

Server

Apache

CMS

WordPress 6.9.4

jQuery

3.3.1 known XSS (<3.5)

Analytics

• Google Tag Manager

Fonts

• Font Awesome
• Google Fonts

Social

• linkedin
• youtube

Registration

Registrar

eNom, LLC

Created

2000-01-05

Expires

2028-01-05 564 days left

Updated

2018-11-13

Name servers

• ns1.firstserv.com
• ns2.firstserv.com

DNS records live

NS

• ns1.firstserv.com
• ns2.firstserv.com

MX

• 1 crossriverpartnership-org.mail.protection.outlook.com

TXT

• n28racdi0t3rf7puuk22qd5vf8

Verified for

• Microsoft 365

Email authentication strong

SPF

v=spf1 mx a ip4:88.150.188.219 ip4:184.106.14.63 ip4:104.130.82.105 ip4:104.130.82.106 ip4:104.130.82.107 ip4:104.130.82.108 ip4:204.94.91.128/25 include:spf.protection.outlook.com include:mailgun.org include:servers.mcsv.net include:amazonses.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; fo=1; ri=3600; rua=mailto:1131b119@inbox.ondmarc.com; ruf=mailto:1131b119@inbox.ondmarc.com

policy: reject (enforced)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4MrpSh8f44UzAmNhGRcS+b3x059gGWOn8q/t7SZf8wCYmodcKXmbYob57LowBlWcdAazklvhLk2HV…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsppkharj7q8ZQ+N0msmwH92EgCCB8801UkmaNvMiQBVozpB4vfwaRmtewDaUkpM/TA+kRb8TnVsz59…
• k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://crossriverpartnership.org/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (26)

• youtube.com×1
• westminster.gov.uk×1
• wearewaterloo.co.uk×1
• victoriabid.co.uk×1
• vauxhallone.co.uk×1
• tfl.gov.uk×1
• teamlondonbridge.co.uk×1
• southwark.gov.uk×1
• southbankbid.co.uk×1
• rglondon.co.uk×1
• pla.co.uk×1
• networkrail.co.uk×1
• londonandpartners.com×1
• london.gov.uk×1
• linkedin.com×1
• lambeth.gov.uk×1
• islington.gov.uk×1
• harleystreetbid.com×1
• fleetstreetquarter.co.uk×1
• eustontown.com×1
• ecbid.co.uk×1
• cityoflondon.gov.uk×1
• centraldistrictalliance.com×1
• camdentownunlimited.com×1
• camden.gov.uk×1
• betterbankside.co.uk×1

Linked from (1)

• upcircle.co.uk×1