wfcorp.com

HTML metadata

Technology

Server

nginx

CMS

WordPress 7.0

jQuery

3.7.1

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (4)

• fonts.googleapis.com×2
• gmpg.org×1
• kit.fontawesome.com×1
• www.googletagmanager.com×1

Social

• facebook
• twitter
• linkedin
• tiktok

Contact

Phone

• 800.849.9791300

Registration

Registrar

NameSilo, LLC

Created

1998-01-29

Expires

2030-01-28 1321 days left

Updated

2024-07-03

Name servers

• pns51.wfcorp.com
• pns52.wfcorp.com
• pns53.wfcorp.com
• pns54.wfcorp.com

DNS records live

NS

• pns51.wfcorp.com
• pns52.wfcorp.com
• pns53.wfcorp.com
• pns54.wfcorp.com

MX

• 10 us-smtp-inbound-1.mimecast.com
• 10 us-smtp-inbound-2.mimecast.com

TXT

Show 6 TXT records

• 48mlg7cv9znp5tv3mctz5h0bz51lzws3
• 7nq8po7ffkbgjsc7fallbu07vj
• 7drf67c3rnbunulvrqhfg3p159
• 0ed1fe018a0d07eef7cf9345d6aecc2f44046a97a4
• intacct-esk=0CCED18FF12AA83DE0634106690ABB49
• v=verifydomain MS=3142586

Verified for

• Apple
• Atlassian
• Cisco
• Google
• Microsoft 365
• Zoom

Email authentication strong

SPF

v=spf1 ip4:45.62.179.181 include:us._netblocks.mimecast.com include:_spf.salesforce.com include:_spf.mailspamprotection.com include:_spf.intacct.com include:_spf.emailcampaigns.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email,mailto:postmaster@wfcorp.com; ruf=mailto:postmaster@wfcorp.com; fo=1;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

• default: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnJWWprgrhX3M71NZVwuUC+nevT8dNLOayhuuqaLBK/RjXPZgl3h1D+0A/nVbnEU8W1fiSFmseRhNzVG…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkRS1kXmwXG6netKR8vhC8F/7HCLr8Pn+B8o3EaNm5iLo6dT0f5R9EiSlNBmxL5Kz+QWpsykH4ytF/c5oM…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDjYNhPxE1Z+weYzzHiP4uHATe5IA6rDsG964CInPu15hDGQnNjVPDpm3rieg92i8beo8dxWmYbeIZYH6QXqnJtgs…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.wfcorp.com/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (7)

• x.com×2
• wfcares.com×2
• tiktok.com×2
• slrcc.com×2
• paywfc.com×2
• linkedin.com×2
• facebook.com×2

Linked from (3)

• slrcc.com×2
• yorkcountychamber.com×2
• ccucc.com×2