domunder.nl
HTML metadata
Technology
- CMS
- WordPress 7.0
- jQuery
- 3.6.0
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (4)
- cdnjs.cloudflare.com×2
- widget.enviso.io×2
- www.google.com×2
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- nsn1.mijndomein.nl
- nsn2.mijndomein.nl
- MX
-
- 10 mx1.emailsrvr.com
- 20 mx2.emailsrvr.com
- Verified for
-
- Microsoft 365
Email authentication weak
- SPF
-
v=spf1 mx include:spf.mijndomeinhosting.nl include:recreatex.be include:emailsrvr.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscQ1dgwUV7rMwpRG+cQSFkSXLa104s4DvLrDZyAVAmOB960CSXiLzL4R6QS2MkgxCn2sgq+aX97DKBoqye… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQ/gSkxjVcck21rcy3fuRsOrlIFY4kLr1Jf9S+cAxP9WpkQjqtltko08xR+ve9ouzo5AnlgyTz8OyzheeF38oLWd…
selectors probed - s1:
Certificate (current)
R12
Expires in 20 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(self)- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self'; frame-src *.savviihq.com *.facebook.com *.google.com *.cookiebot.com *.hotjar.com *.youtube.com *.vimeo.com *.googletagmanager.com *.cookiebot.com *.fontawesome.com www.domunder.nl https://checkoutshopper-live.adyen.com *.adyen.com- strict-transport-security
max-age=31536000