luciusbooks.com

HTML metadata

Technology

Server

Apache

jQuery

1.12.4 known XSS (<3.5)

Stack

PHP

Analytics

• Google Tag Manager

Fonts

• Adobe Fonts

Third-party hosts loaded (5)

• ajax.googleapis.com×1
• maxcdn.bootstrapcdn.com×1
• use.typekit.net×1
• widget.trustpilot.com×1
• www.googletagmanager.com×1

Social

• instagram
• facebook

Contact

Phone

• 1904 640 111

Address

70 Micklegate, YO1 6LF, York, GB

DNS records live

NS

• ns1.g02.cfdns.net
• ns2.g02.cfdns.biz
• ns3.g02.cfdns.info
• ns4.g02.cfdns.co.uk

MX

• 10 a.mx.apm-internet.net
• 20 b.mx.apm-internet.net

Verified for

• Google

Email authentication partial

SPF

v=spf1 a include:spf.sq.gg include:_spf.emailcampaigns.net include:servers.mcsv.net -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.luciusbooks.com/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (7)

• aba.org.uk×1
• facebook.com×1
• ilab.org×1
• instagram.com×1
• pbfa.org×1
• trustpilot.com×1
• yorkbooksellers.co.uk×1

Linked from (1)

• ashrarebooks.com×1