dearchitectprojectbezoeken.nl
HTML metadata
Technology
- Server
- nginx
Third-party hosts loaded (3)
- cdn1.aanmelder.nl×8
- cdn.aanmelderusercontent.nl×6
- services.crmservice.eu×1
Contact
Registration
- Registrar
- Realtime Register
- Created
- 2016-03-23
- Updated
- 2021-11-30
- Name servers
-
- ns2.argewebhosting.com
- ns3.argewebhosting.nl
- ns1.argewebhosting.eu
DNS records live
- NS
-
- ns1.argewebhosting.eu
- ns2.argewebhosting.com
- ns3.argewebhosting.nl
- MX
-
- 10 mail.domeinen.aanmelder.nl
- TXT
-
aanmelder.nl-user=86548
Email authentication weak
- SPF
-
v=spf1 a mx include:_spf.aanmelder.nl ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 56 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
deny- x-content-type-options
nosniff- content-security-policy
base-uri 'self'; default-src 'none'; manifest-src *.aanmelder.nl; object-src 'none'; font-src 'self' data: *.aanmelder.nl *.aanmelderusercontent.nl fonts.gstatic.com; img-src blob: data: https:; worker-src blob: 'unsafe-eval' 'unsafe-inline' https:; script-src 'unsafe-eval' 'unsafe-inline' https:; style-src 'unsafe-inline' https:; connect-src https: wss:; media-src https: blob:; frame-src https:; form-action https:; upgrade-insecure-requests; report-uri /i/csp-report; report-to csp-report; frame-ancestors 'none';- strict-transport-security
max-age=31536000- content-security-policy-report-only
base-uri 'self'; default-src 'none'; manifest-src *.aanmelder.nl; object-src 'none'; font-src 'self' data: *.aanmelder.nl *.aanmelderusercontent.nl fonts.gstatic.com; img-src blob: data: https:; worker-src blob: 'unsafe-eval' 'unsafe-inline' https:; script-src 'unsafe-eval' 'unsafe-inline' 'self' *.aanmelder.nl *.adyen.com cdnjs.cloudflare.com *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.hs-scripts.com; style-src 'unsafe-inline' https:; connect-src 'self' *.aanmelder.nl wss://*.aanmelder.nl *.adyen.com *.google-analytics.com *.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com wss://*.daily.co *.daily.co; media-src https: blob:; frame-src https:; form-action 'self' *.aanmelder.nl *.adyen.com *.google-analytics.com forms.hsforms.com; report-uri /i/csp-report; report-to csp-report;