dewolwinkel.nl
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- jQuery
- 3.7.1
- Analytics
-
- Google Tag Manager
- Social widgets
-
- Vimeo Embed
Third-party hosts loaded (5)
- challenges.cloudflare.com×2
- gmpg.org×1
- player.vimeo.com×1
- www.googletagmanager.com×1
- www.youtube.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- denver.ns.cloudflare.com
- isabel.ns.cloudflare.com
- MX
-
- 10 mx.zoho.eu
- 20 mx2.zoho.eu
- 50 mx3.zoho.eu
- Verified for
-
- Zoho
Email authentication strong
- SPF
-
v=spf1 include:zohomail.eu include:spf.esmero.nl -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:info@dewolwinkel.nl; ruf=mailto:info@dewolwinkel.nl; sp=quarantine; adkim=r; aspf=r; pct=100policy: quarantine · sp=quarantine - DKIM
- no key found at common selectors
Certificate (current)
WE1
Expires in 72 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(self), camera=(), microphone=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: blob: *.wp.com *.wordpress.org *.gravatar.com *.w.org *.elementor.com library.elementor.com; frame-src 'self' https: *.youtube.com *.vimeo.com *.google.com *.facebook.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests- strict-transport-security
max-age=2592000; includeSubDomains- cross-origin-opener-policy
same-origin-allow-popups- cross-origin-resource-policy
cross-origin
Links to (6)
- whatsapp.com×1
- swup.nl×1
- pinterest.com×1
- linkedin.com×1
- instagram.com×1
- breiclub.nl×1
dewolwinkel.nl