bakeplus.nl
HTML metadata
Technology
- Server
- BunnyCDN-DE1-1331
- CMS
- Gatsby
- jQuery
- 3.6.0
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (5)
- s3-cdn.cloudsuite.com×7
- static.mailplus.nl×4
- m14.mailplus.nl×1
- www.google.com×1
- www.googletagmanager.com×1
Social
Contact
Registration
- Registrar
- team.blue nl B.V.
- Created
- 2007-09-17
- Updated
- 2023-04-17
- Name servers
-
- ns2.transip.eu
- ns0.transip.net
- ns1.transip.nl
DNS records live
- NS
-
- ns0.transip.net
- ns1.transip.nl
- ns2.transip.eu
- MX
-
- 10 fortimail.netdata.nl
- TXT
-
dhoa1k9h66vfnugs9b5l0pe7h1
- Verified for
-
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 a:twikey.com ip4:52.29.184.146 ip4:13.93.42.39 ip4:40.69.19.60 ip4:40.92.0.0/15 ip4:13.81.10.179 ip4:178.22.59.127 ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 ip4:69.72.32.0/20 ip4:20.93.157.195 ip4:89.207.31.0/24 ip4:217.149.129.45 ip4:213.84.178.174 ip4:198.2.128.0/18 ip4:148.105.8.0/21 ip4:87.233.70.0/24 ip4:178.22.56.0/21 ip4:166.78.68.0/22 ip4:193.187.189.137 ip4:80.247.203.0/24 ip4:87.233.139.0/24 include:_spf0000000.bakeplus.nl ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantinepolicy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGs/kstzc1SAdHfEJLYwLmzvj7WdKg1eruQSRAme+fXp+/Z6YBoTBIF+4ygpU/n0UHx76oPeSotUAiGLphL0… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVeEWDnwmQYiXSYx8d2CCL30nmVLWVtyecRus1JK55ThOWVpg3mTMwHfhdyVs6YYoWdc44uyzcoa/D1rXY16… - s1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0XkZN+Fj/YyBQevGJ8E5sJagUzxrGAtpQGSrqi8kGppJkPB496bFyLBNIj1/WydT6GgHqILMmHZ0zRgGjvM3UgN6Hy7I…
selectors probed - selector1:
Certificate (current)
R12
Expires in 43 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com *.pinterest.com *.cloudfront.net *.pinimg.com connect.getflowbox.com *.googletagmanager.com https://consent.studio *.cloudsuite.com *.google.com *.google-analytics.com https://www.googleadservices.com https://www.gstatic.com https://maps.googleapis.com https://snap.licdn.com connect.facebook.net *.azureedge.net *.msecnd.net *.personyze.com https://selfservice.robinhq.com surfly.com robincontentdesktop.blob.core.windows.net *.hotjar.com *.hotjar.io *.doubleclick.net kit.fontawesome.com player.vimeo.com *.marketingautomation.services *.publitas.com *.perfectaudience.com https://pixel-geo.prfct.co *.trengo.eu *.bing.com https://chimpstatic.com *.ads-twitter.com *.twitter.com *.tawk.to https://embed.tawk.to https://*.tawk.link https://cdn.jsdelivr.net *.mailplus.nl; img-src 'self' data: blob: *.google-analytics.com *.facebook.com *.cloudfront.net *.google.com *.google.nl *.pinimg.com *.goog- strict-transport-security
max-age=31536000
Links to (7)
- youtube.com×1
- wa.me×1
- linkedin.com×1
- jimdosite.com×1
- instagram.com×1
- facebook.com×1
- bakesmart.nl×1