faceworks.nl
HTML metadata
Technology
- Stack
- PHP
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Social
Contact
DNS records live
- NS
-
- ns-cloud-c1.googledomains.com
- ns-cloud-c2.googledomains.com
- ns-cloud-c3.googledomains.com
- ns-cloud-c4.googledomains.com
- MX
-
- 0 mx.spamexperts.com
- 1 fallbackmx.spamexperts.eu
- 2 lastmx.spamexperts.net
- TXT
-
nordpass-domain-verification=6c5bb78e69ac6ed5162a6159bbb1829314b19f4369c28547ee55226b73dd3d3f
Email authentication partial
- SPF
-
v=spf1 include:_spf.faceworks_nl._d.pro.dmarcprotect.me include:_spf.mijnwefact.nl -allstrict (-all) - DMARC
-
v=DMARC1;p=none;rua=mailto:3ccdb25abb@rua.dmarcprotect.me;ruf=mailto:3ccdb25abb@ruf.dmarcprotect.me;fo=1;policy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AAVm0LD94CQhqLFSlQCl1Xt3ENfKvRCEw8Di2UVajeXyTApmvbiRcpXRRHJPrgHbfogDS7d/4c0Nc…
selectors probed - default:
Certificate (current)
WR3
Expires in 63 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
DENY- permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=(), conversion-measurement=(), focus-without-user-activation=(), hid=(), idle-detection=(), interest-cohort=(), serial=(), sync-script=(), trust-token-redemption=(), window-placement=(), vertical-scroll=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' data: 'unsafe-inline'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; img-src 'self' data: https://static.faceworks.nl https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://imgsct.cookiebot.com; font-src 'self' https://cdn.faceworks.nl https://use.typekit.net; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://consentcdn.cookiebot.com; frame-src 'self' https://consentcdn.cookiebot.com;- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (5)
- opera.com×1
- mozilla.org×1
- microsoft.com×1
- linkedin.com×1
- google.com×1