cjghillegom.nl
HTML metadata
Technology
- Server
- CJG
- CMS
- Joomla
- jQuery
- 3.3.1 known XSS (<3.5)
- Analytics
-
- Google Tag Manager
- Fonts
-
- Font Awesome
Third-party hosts loaded (4)
- cdnjs.cloudflare.com×2
- f1-eu.readspeaker.com×1
- use.fontawesome.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns01.mostware.nl
- ns02.mostware.nl
- MX
-
- 0 cjghillegom-nl.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication weak
- SPF
-
v=spf1 ip4:87.213.69.170 ip4:108.143.199.47 include:spf.opvoedenin.nl include:spf.protection.outlook.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUJ7De2vLdHO8/n8V2Rol2rpXzL3ccFPdlrkcAwRUubaxO7/pZJgqJbiqD3nmssc1zSTiovmBgfIjP…
selectors probed - selector1:
Certificate (current)
R12
Expires in 75 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://f1-eu.readspeaker.com https://widget.scribit.pro https://use.fontawesome.com https://cdn.jsdelivr.net https://player.vimeo.com https://www.youtube.com https://insitez.blob.core.windows.net; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://f1-eu.readspeaker.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://twitter.com https://www.linkedin.com https://img.youtube.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://www.toegankelijkheidsverklaring.nl; font-src 'self' https://use.fontawesome.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com data:; connect-src 'self' https://*.google-analy- strict-transport-security
max-age=31536000
Links to (7)
- youtu.be×1
- ouders.nl×1
- linkedin.com×1
- instagram.com×1
- google.nl×1
- facebook.com×1
- cjgprof.nl×1