cybox.nl

HTML metadata

Title: Een nieuwe website of webwinkel laten maken? - Cybox
Description: Wij ontzorgen je helemaal bij het maken van websites, webwinkels en online oplossingen.
Language: nl

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Email

Phone

+31485471774

Registration

Registrar

CYBOX Internet & Communicatie

Created

1997-10-21

Updated

2019-05-13

Name servers

ns2.cybox.eu
ns1.cybox.nl

DNS records live

NS

ns1.cybox.nl
ns2.cybox.eu

MX

1 mx1.smtp.goog
10 mx4.smtp.goog
5 mx2.smtp.goog
5 mx3.smtp.goog

Verified for

Google

Email authentication strong

SPF

v=spf1 ip4:185.92.68.211 ip4:213.125.134.10 include:_spf.google.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@cybox.nl; ruf=mailto:dmarc-reports@cybox.nl;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc8E099TPUDi/noSUPQwXZlbAkHthIm6xQV8AuLsJPCWDXcCxYzYprA6oR3QYWw2gLbU7fxhFdeYwN…

selectors probed

Certificate (current)

R12

from 2026-05-08 to 2026-08-06

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.cybox.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.typekit.net; script-src 'self' www.googletagmanager.com *.google-analytics.com 'unsafe-eval' https://*.googleapis.com *.typekit.net 'nonce-sHj2fZ2Hn+LwD/3yrMZ+uQ=='; img-src 'self' data: i.ytimg.com i.vimeocdn.com *.cyblog.nl www.googletagmanager.com *.google-analytics.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com *.typekit.net; frame-src 'self' www.youtube.com player.vimeo.com *.google.com; connect-src 'self' *.google-analytics.com https://stats.g.doubleclick.net https://*.googleapis.com *.google.com https://*.gstatic.com data: blob: performance.typekit.net; base-uri 'self'; font-src 'self' fonts.gstatic.com *.typekit.net;
strict-transport-security: max-age=63072000; includeSubDomains