bevaplast.nl

HTML metadata

Technology

Server

nginx

jQuery

3.7.1

Analytics

• Google Tag Manager

Cookie consent

• Cookiebot

Third-party hosts loaded (5)

• code.jquery.com×1
• consent.cookiebot.com×1
• www.bevaplast.de×1
• www.bevaplast.eu×1
• www.googletagmanager.com×1

DNS records live

NS

• ns-f.dns.yourhosting.nu
• ns-m.dns.yourhosting.nl
• ns-w.dns.yourhosting.eu

MX

• 1 bevaplast-nl.mail.protection.outlook.com

Email authentication weak

SPF

v=spf1 ip4:65.109.233.176 ip6:2a01:4f9:c010:d04b::1 include:spf.protection.outlook.com include:spf.exclaimer.net include:spf.cloudsuite.com ~all

softfail (~all)

DMARC

not published

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/mCcLFIoi87VrH/aidkhe2fc6txg9ucXn/3lpBNR6Usbn44iYISZ9D6YWL8lmH2LavCsDtjk9u4N1fYeiPP…
• dkim: v=DKIM1;k=rsa;g=*;s=email;h=sha256;t=;p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMulQIlR9bnrzN+up5V/lYuJKiqzMMRJUG/yIXQ2kWF5Pg5THHHkbhhmnsq1cw3CoQID…

selectors probed

Certificate (current) wrong cert

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.bevaplast.nl/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (2)

• bevaplast.eu×1
• bevaplast.de×1

Linked from (3)

• bevaplast.de×1
• bevaplast.eu×1
• impact-subsidieadvies.nl×1