enexis.nl
HTML metadata
Technology
- CMS
- Next.js
- JS framework
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- dev.visualwebsiteoptimizer.com×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- ns-1262.awsdns-29.org
- ns-162.awsdns-20.com
- ns-1811.awsdns-34.co.uk
- ns-940.awsdns-53.net
- MX
-
- 0 enexis-nl.mail.protection.outlook.com
- TXT
-
Show 11 TXT records
uy2i2lGi_-gAXElevLzm6FXKQX5sCHV0p0IznvTrsAEndUHvsLhMiZnIYVOgnU+mOL0f1St98l/cFAzhd1ru9q8hHBZqbeYYKj3J+W+bWw==successfactors-site-verification=ZDBiYTI0MTEyODRjZWI2MTA3OTE3YTRhNTVkZGUzMzExZmI5MWY3MWZmMGQxZGQ3Njk1YjAyNTZlZjA3NzZhMg==bw=zOQuVz6xP4cA5IxA0kQ5hSPfQwEk6jI8UKbjtmnzG1nNmatillion:enexis-nl-ssoautodesk-domain-verification=SA-TTc9jDbERUAf7y71oremarkable-domain-verification=6edb545d-3c2d-4e8e-add2-befaca1cfe60mentimeter-4c3a440e-b03b-46ff-a01b-6ba8f7c49bbaunity-sso-verification=9a510268-fb48-427d-b5c3-f30d493b39b4bw=6s24jL5sz5usJAkNf8t4vH4Eni3XqEpdrtSHpYMcbZ8Abw=LqsrCgxc9xtKykNTBNfIsPbAKhqobRGJGEzwqm4EUgbo
- Verified for
-
- Adobe
- Apple
- Atlassian
- CloudHealth
- DocuSign
- Figma
- Microsoft 365
- Miro
- MongoDB
- Sitecore
- Workplace
Email authentication strong
- SPF
-
v=spf1 include:_spf.enexis.nl include:spf.protection.outlook.com include:amazonses.com include:_spf.pti.nl include:_spf.spotler.email include:mailservers.expoints.nl include:_spf-dc57.sapsf.eu -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; pct=100; rua=mailto:dxrphdfi@ag.eu.dmarcian.com;ruf=mailto:dxrphdfi@fr.eu.dmarcian.com, mailto:dmarc@enexis.nlpolicy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Oo29sXLdae6OVF4Py8FAZiTFX5H9pbrVAlyapLtG+k9nzc/0kSt2ZQKFRfN495Y4qX8adYqWoMaqJ… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDavwPAByPwPxxvrpSwUnAUdPuGbCZwnfV6uS2zwPi/Kd/BDuK7o4k13AE13DY75fBJAglEfBSt8k0pcDkq3H…
selectors probed - selector1:
Certificate (current)
Sectigo Public Server Authentication CA EV R36
Expires in 263 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), camera=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://cdn-www.enexis.nl; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.adform.net https://*.clarity.ms https://*.cookiebot.com https://*.doubleclick.net https://*.expoints.nl https://*.google-analytics.com https://*.google.com https://*.google.nl https://*.googleadservices.com https://*.googleanalytics.com https://*.googleoptimize.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://*.ldnfrpl.com https://*.licdn.com https://*.reddit.com https://*.redditstatic.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://bat.bing.com https://bat.bing.net https://cdn.pushcrew.com https://cdn.leadinfo.net https://connect.facebook.net https://edc.enexis.nl https://extreme-ip-lookup.com https://maps.googleapis.com https://nlmaps.nl https://secure.adnxs.com https://static.ads-twitter.com https://static.readpeak.com https://cdn-www.enexis.nl; style-src 'self' 'unsafe-eval' 'unsafe-inline' ht- strict-transport-security
max-age=63072000; includeSubDomains; preload