indexo.dev

barnahus.eu

.eu crawl

First seen 2026-04-14 · Last seen 2026-05-06 · ok HTTP/1.1 200 2703 ms crawled 2026-05-08

EE · 217.146.69.1 · AS49604 Zone Media OU

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
Barnahus Network
Language
en-US
Generator
WordPress 6.9.4
Canonical
https://barnahus.eu/
Feeds

Technology

Server
Apache
CMS
WordPress

Third-party hosts loaded (2)

  • analytics.hedengren.services×1
  • cdnjs.buymeacoffee.com×1

Social

DNS records live

NS
  • ns.zone.eu
  • ns2.zone.ee
  • ns3.zonedata.net
MX
  • 0 barnahus-eu.mail.protection.outlook.com
TXT
Show 4 TXT records
  • MS=ms91960408
  • brevo-code:67225490afacfba024cf6bc1cdc205d4
  • google-site-verification=v-mmQJi7mtkbcXDE48n6IPhKcnHkqk7UZx3i4navJz0
  • brevo-code:b6494f8c7bf19c69bb93645d7922233d

Email authentication partial

SPF
v=spf1 a mx include:_spf.zone.eu include:spf.protection.outlook.com include:_spf.tem.scaleway.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
policy: none (monitoring only)
DKIM
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed

Certificate (current)

R12
from 2026-04-06 to 2026-07-05
Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://barnahus.eu/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://*.buymeacoffee.com https://*.stripe.com https://*.buymeacoff.ee https://buymeacoffee.com https://stripe.com https://buymeacoff.ee https://luma.com/; img-src 'self' data: blob: https://*.buymeacoffee.com https://*.stripe.com https://*.buymeacoff.ee https://buymeacoffee.com https://stripe.com https://buymeacoff.ee https://luma.com/; object-src 'self' data: blob: https://datawrapper.dwcdn.net/ https://assets.brevo.com/ https://sibforms.com/ https://*.sibforms.com/ https://*.buymeacoffee.com https://*.stripe.com https://*.buymeacoff.ee https://buymeacoffee.com https://stripe.com https://buymeacoff.ee https://luma.com/; frame-src 'self' data: blob: https://datawrapper.dwcdn.net/ https://assets.brevo.com/ https://sibforms.com/ https://*.sibforms.com/ https://*.buymeacoffee.com https://*.stripe.com https://*.buymeacoff.ee https://buymeacoffee.com https://stripe.com https://buymeacoff.ee https://luma.com/;

Links to (3)

Linked from (1)