boels.com

.com crawl

First seen 2026-04-15 · Last seen 2026-05-18 · ok HTTP/1.1 200 3936 ms crawled 2026-05-09

NL · 20.105.224.24 · AS8075 Microsoft Corporation

Reputation 89/100 weak security headers dmarc monitor-only

sector other type parked

Technology

CDN: Azure Front Door

Analytics

Google Analytics
Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×1
fonts.gstatic.com×1
www.google-analytics.com×1
www.googletagmanager.com×1

Registration

Registrar

EuroDNS S.A.

Created

1996-09-25

Expires

2026-09-24 128 days left

Updated

2025-09-18

Name servers

ns1.eurodns.com
ns2.eurodns.com
ns3.eurodns.com
ns4.eurodns.com

DNS records live

NS

ns1.eurodns.com
ns2.eurodns.com
ns3.eurodns.com
ns4.eurodns.com

MX

0 boels-com.mail.protection.outlook.com

TXT

Show 9 TXT records

sandbox9403532c94c24152827dfdd754ab875f.mailgun.org
MS=ms81148766
facebook-domain-verification=ai9s43szt41p5gt0pr1dm81rnulrpj
lh37bf8539890qm42ptkrtv6sfpcj4nj
google-site-verification=uVBsSq6hbcTBzdmCSlCRf8VGuLbJYvXGl671YP-WxOs
detectify-verification=7bd3a756da1cddf5b7ab8c14946947ea
730p15hnzc4fjb3ww46znht26xxrd6l6
successfactors-site-verification=MjY4ODg2ZWI4M2RlOGJkZDNiOWNlNDUxODY4MmI0ZjEwMjUzNGMwOTMyMDI1ZTUwNDUwYzU0ZTE3OTFiMjU5YQ==
v=DKIM1;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDdMEa8bDa/9+0iYEjIRJ4v/yDZ+TTudMV3CHkZVqucGqMDlzy812fgclzI661gWNg4KN6E+Zo6vdrhe0E7K+Q5YvecB7loHoPYF2JtoZExmZlfHjCxjakBGUIpLYSeZ3Dnts0zfWHdMeaanyMFIaeTetI7eOBje/fH5Z3XpvYJTwIDAQAB

Email authentication partial

SPF

v=spf1 include:_u.boels.com._spf.dmarclb.com include:spf.protection.outlook.com include:spf.coachview.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:619263d14112a@ag.dmarcly.com; ruf=mailto:619263d14112a@fo.dmarcly.com; sp=none; fo=0:1;

policy: none (monitoring only) · sp=none

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XIA7jDbrnXSPhwPdPq8HhAGkcgqgzVF1Of8jibuRpP+rCTlHLjAX5DbvoGMyycNlVltxk0XkrePXo…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFeS1b67BTxiTmGDkcLnq1n6iPCr0jiSb16g8TPRRpp/1jgrlFyfpnSv7nEdt5QPV3nzUwp4kwtdL5bIvo…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCoomsMaWAfrKrfQn1O5Ca7urFx+E2SpfxggGLig35XhxgpiXoBimBLxGm2BP+FnKeitXUDSbBGufSJbnu4oQHBGG…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-27 to 2026-08-28

Expires in 101 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.boels.com/countryselection

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: frame-ancestors 'self' backoffice.cmrcmm6y-boelstoph1-d1-public.model-t.cc.commerce.ondemand.com backoffice.cmrcmm6y-boelstoph1-s1-public.model-t.cc.commerce.ondemand.com backoffice.cmrcmm6y-boelstoph1-p1-public.model-t.cc.commerce.ondemand.com; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.b2clogin.com https://*.cmrcmm6y-boelstoph1-p1-public.model-t.cc.commerce.ondemand.com https://www.boels.com https://*.boels.com https://api.boels.com https://integratewith.boels.com https://jsapps.boels.com https://mediahub.boels.com https://prod.boels.com https://api.db-ip.com https://dc.services.visualstudio.com https://fonts.googleapis.com https://www.gstatic.com https://maps.gstatic.com https://fonts.gstatic.com https://i.ytimg.com https://recaptcha.net https://use.fontawesome.com https://googletagmanager.com https://www.googletagmanager.com https://tagmanager.google.com https://trc.taboola.com https://*.adroll.mgr.consensu.org https://*.hotjar.io https://in.hotjar.com https: