Automatic security check · Public OSINT only
Company website
blog.jetbrains.com security check
Public OSINT valuation for blog.jetbrains.com: grade C (59/100). Title signal “JetBrains Blog: The Drive to Develop”. 2 security headers present, 6 commonly expected headers missing. This is a defensive surface review — not a penetration test.
59
/100
Grade C
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
How we scored blog.jetbrains.com
Positive signals
- TLS handshake OK (TLSv1.3).
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (jetbrains.com).
- Final HTTP status 200 at https://blog.jetbrains.com/.
Risk signals
- HSTS header missing on the final HTTPS response.
- X-Content-Type-Options missing.
- Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
Findings
- TLS handshake OK (TLSv1.3).
- HSTS header missing on the final HTTPS response.
- Content-Security-Policy observed.
- X-Content-Type-Options missing.
- Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (jetbrains.com).
- Final HTTP status 200 at https://blog.jetbrains.com/.
Technical details
DNS
resolved- A
- 13.32.121.118, 13.32.121.103, 13.32.121.108, 13.32.121.101
- AAAA
- —
- PTR
- server-13-32-121-118.fra60.r.cloudfront.net
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_128_GCM_SHA256
- issuer
- Amazon
- notAfter
- Dec 20 23:59:59 2026 GMT
- SAN sample
- blog.jetbrains.com, admin.blog.jetbrains.com, blogs.jetbrains.com
- error
- —
HTTP & security headers
2 present- finalUrl
- https://blog.jetbrains.com/
- status
- 200
- server
- CloudFront
- x-powered-by
- —
- present
- content-security-policy, x-frame-options
- missing
- strict-transport-security, x-content-type-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- JetBrains Blog: The Drive to Develop
- generator
- WPML ver:4.9.3 stt:59,9,1,4,3,28,29,42,45,2,53;
- tech
- WordPress, Google Analytics
- script hosts
- blog.jetbrains.com, x
- description
- Developer Tools for Professionals and Teams
RDAP / registration
rdap- domain
- jetbrains.com
- registrar
- Network Solutions, LLC
- created
- 2001-11-09T22:06:26Z
- expires
- 2028-11-09T22:06:26Z
- nameservers
- ns-1519.awsdns-61.org, ns-1701.awsdns-20.co.uk, ns-345.awsdns-43.com, ns-613.awsdns-12.net
- status
- client transfer prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 404
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404