metroalive.com

HTML metadata

Technology

Server

Microsoft-IIS

jQuery

1.12.4 known XSS (<3.5)

Fonts

• Google Fonts

Third-party hosts loaded (6)

• fonts.googleapis.com×4
• cdn.jsdelivr.net×2
• ajax.googleapis.com×1
• code.getmdl.io×1
• maps.googleapis.com×1
• www.facebook.com×1

Social

• instagram
• facebook
• youtube
• twitter

Registration

Registrar

Network Solutions, LLC

Created

2005-09-02

Expires

2027-09-02 453 days left

Updated

2022-07-04

Name servers

• ns83.worldnic.com
• ns84.worldnic.com

DNS records live

NS

• ns83.worldnic.com
• ns84.worldnic.com

MX

• 10 aspmx.l.google.com
• 20 alt1.aspmx.l.google.com
• 30 alt2.aspmx.l.google.com
• 40 aspmx2.googlemail.com
• 50 aspmx3.googlemail.com

Verified for

• Google

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; sp=none; fo=1; ri=3600; rua=mailto:metroalive@rua.agari.com,mailto:cfalberg@metroalive.com; ruf=mailto:metroalive@ruf.agari.com,mailto:cfalberg@metroalive.com

policy: none (monitoring only) · sp=none

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWOeUbfI44/X6HNMpDUMFJ9LCEcOZqh0/za5DpKho3E3DnuI4/RX1dLp3J3qFF1to5WlcVyhH0+/lr…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.metroalive.com/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (10)

• facebook.com×1
• ford.com×1
• instagram.com×1
• lakeshorechurch.com×1
• otussupply.com×1
• primosbirmingham.com×1
• royaloaktaphouse.com×1
• twitter.com×1
• wallysfrozencustard.net×1
• youtube.com×1

Linked from (6)

• georgessenateconeyisland.com×2
• craftbrewwcity.com×1
• primosbirmingham.com×1
• wallysfrozencustard.net×1
• lakeshorechurch.com×1
• otussupply.com×1