boondoggle.eu
HTML metadata
Technology
- CDN
- Netlify
- CMS
- Next.js
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (3)
- images.ctfassets.net×36
- use.typekit.net×4
- p.typekit.net×1
Social
Contact
- Phone
- Address
- Boondoggle Havas NVHavenkant 6, bus 5083000 Leuven
DNS records live
- NS
-
- rick.ns.cloudflare.com
- uma.ns.cloudflare.com
- MX
-
- 10 mxa-00276502.gslb.pphosted.com
- 10 mxb-00276502.gslb.pphosted.com
- TXT
-
[2396458]
- Verified for
-
- Adobe
- Atlassian
- GlobalSign
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 include:prezlymail.com include:spf.havas.com mx -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; fo=1; rua=mailto:mailauth-reports@havasit.com; ruf=mailto:mailauth-reports@havasit.compolicy: reject (enforced) - DKIM
-
- smtpapi:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O2J9N14hRprzByFwfQW76y…
selectors probed - smtpapi:
Certificate (current)
E7
Expires in 78 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
Header values
- referrer-policy
origin-when-cross-origin- permissions-policy
camera=(), microphone=(), geolocation=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' www.googletagmanager.com *.google-analytics.com *.googleapis.com consent.cookiefirst.com *.boondoggle.eu 'unsafe-inline' 'unsafe-eval' www.youtube.com boondoggle.containers.piwik.pro *.google.com *.google.be; style-src 'self' 'unsafe-inline' *.typekit.net consent.cookiefirst.com www.googletagmanager.com fonts.googleapis.com; font-src 'self' data: *.typekit.net fonts.gstatic.com; base-uri 'self'; object-src 'self'; worker-src 'self' blob:; frame-ancestors 'self' https://app.contentful.com; frame-src 'self' www.youtube.com www.youtube-nocookie.com; media-src 'self' *.ctfassets.net; img-src 'self' data: *.ctfassets.net consent.cookiefirst.com www.google-analytics.com cdn.uc.assets.prezly.com fonts.gstatic.com www.googletagmanager.com *.google.com *.google.be api.iconify.design api.simplesvg.com api.unisvg.com; connect-src 'self' press.boondoggle.eu *.google-analytics.com *.cookiefirst.com stats.g.doubleclick.net boondoggle.piwik.pro matomo.boondoggle.- strict-transport-security
max-age=31536000