hifi.nl

HTML metadata

Technology

CDN

Cloudflare

jQuery

2.2.4 known XSS (<3.5)

Stack

PHP

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Social widgets

• YouTube Embed

Social

• youtube
• facebook
• instagram
• linkedin

DNS records live

NS

• blakely.ns.cloudflare.com
• john.ns.cloudflare.com

MX

• 1 aspmx.l.google.com
• 10 aspmx2.googlemail.com
• 10 aspmx3.googlemail.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

Verified for

• Google

Email authentication partial

SPF

v=spf1 include:spf.geenspam.mx include:_spf.google.com ip4:206.189.9.69 ~all

softfail (~all)

DMARC

v=DMARC1; p=none; pct=50; sp=none; aspf=r;

policy: none (monitoring only) · pct=50 · sp=none

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy3eHkz4MmVFPwtJPyBmDesu0oa2fwBV5u1U3yAcAoHSFN/8IzCRwES+0EEtNFsuaZafCm68h1SHVw…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://hifi.nl/

present

• strict-transport-security
• x-frame-options
• x-content-type-options

findings

• missing Content Security Policy
• weak frame protection
• missing Referrer Policy
• missing Permissions Policy

Links to (10)

• bsky.app×1
• eisa.eu×1
• facebook.com×1
• fwdmagazine.be×1
• hifi.be×1
• instagram.com×1
• linkedin.com×1
• techfi.nl×1
• twitter.com×1
• youtube.com×1

Linked from (7)

• silentangel.com×1
• hifi.be×1
• techfi.nl×1
• hbd.nl×1
• boogolinks.nl×1
• daudio.nl×1
• startbewijs.nl×1