beschermingoverstroming.nl

HTML metadata

Technology

Server

Apache

jQuery

1.10.2 known XSS (<3.5)

Third-party hosts loaded (1)

• ajax.googleapis.com×1

DNS records live

NS

• ns10.webreus.net
• ns11.webreus.net

MX

• 10 mx-in-1.webreus.nl
• 10 mx-in-2.webreus.nl
• 3 mx-in-3.webreus.nl
• 3 mx-in-4.webreus.nl

Email authentication strong

SPF

v=spf1 include:spf.webreus.email -all

strict (-all)

DMARC

v=DMARC1; p=quarantine

policy: quarantine

DKIM

• dkim: v=DKIM1; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXw7HQBiXUrRpq8KozeozDzK4D9jM2YEeAFITiG4Vg6e2hkNp33Qez+IXnwTDEEQF4jloXPTaTav+zg5…

selectors probed

Certificate (current) wrong cert

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked over plain HTTP: http://beschermingoverstroming.nl/

findings

• checked over plain HTTP
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (22)

• zeelandveilig.nl×1
• waterforum.net×1
• untold-stories.net×1
• unhcr.org×1
• trouw.nl×1
• rijksoverheid.nl×1
• paypal.com×1
• overheid.nl×1
• nwp.nl×1
• nederlandveilig.nl×1
• leidschendam-voorburg.nl×1
• knmi.nl×1
• ipcc.ch×1
• infonu.nl×1
• helpdeskwater.nl×1
• environment-agency.gov.uk×1
• dw.de×1
• deltacommissie.com×1
• crisis.nl×1
• changemagazine.nl×1
• brunolandowski.fr×1
• ahn.nl×1

Linked from (1)

• untold-stories.net×1