hln.be
HTML metadata
Technology
Third-party hosts loaded (6)
- myprivacy-static.dpgmedia.net×3
- advertising-cdn.dpgmedia.cloud×2
- s1.mychannels.video×2
- dev.visualwebsiteoptimizer.com×1
- embed.mychannels.video×1
- login-static.dpgmedia.net×1
Social
Contact
- Phone
- Address
- Mediaplein 1, 2018, Antwerpen, België
DNS records live
- NS
-
- eur2.akam.net
- eur5.akam.net
- eur6.akam.net
- ns1-125.akam.net
- ns1-25.akam.net
- usc2.akam.net
- use2.akam.net
- use5.akam.net
- MX
-
- 1 aspmx.l.google.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 12 TXT records
facebook-domain-verification=2jgr3haboq2xr3fzm2kic23lkven19amazonses:YDB0TfehSszWjKMPQeitwseseRet6bjxZvW8E6DvN4g=facebook-domain-verification=qdnthc0t57vskwbmgs7afrlqar1qn1klaviyo-site-verification=Xi7EdUv=spf2.0/pra include:spf.persgroep-ops.net include:spf-asp4all.persgroep-ops.net -allgoogle-site-verification=iguJx2-HX9YONCvySPNRGKEv49WX8Xwq8Y6Dh5fYWFUgoogle-site-verification=mgODHwU2mkxwPCUq3eDrjWOdUFb2OKx8DwN1uUv4k2Upersgroep-ecommerce-be-prod.azurewebsites.netTT3S03j3kE/8vckBiPUEFCFK90GHYURBsZFik8Q+R0xjNjyj8jRWFo9Ls9pSCFz756tOuLI6HxlN/Jmd/VQAwQ==MS=ms2737432055rhnfv3ibuot10cfe8piui0augoogle-site-verification=Qv4LS6qk6Z3wutAXH_oEN0wDoJuAUbH-Ohak6idlcmc
Email authentication weak
- SPF
- not published
- DMARC
- not published
- DKIM
-
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqUinVN/jMa7LoPjFgM8P9XKmbXgREWO5Fsys5ainBEum81nXIWe+DIN+OPAt4UWi4Dn1lW9y4bSsMpr8xbT…
selectors probed - google:
Certificate (current)
DigiCert Global G3 TLS ECC SHA384 2020 CA1
Expires in 136 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
DENY- permissions-policy
ch-ua-model=*,ch-ua-platform-version=*- x-content-type-options
nosniff- content-security-policy
default-src https: blob:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; img-src data: https: blob: android-webview android-webview-video-poster:; font-src data: https:; connect-src * blob:; media-src https: data: blob:; worker-src https: blob:; upgrade-insecure-requests;- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (12)
- apple.com×1
- cim.be×1
- dpgmedia.be×1
- dpgmediagroup.com×1
- facebook.com×1
- google.com×1
- instagram.com×1
- jep.be×1
- kamelego.be×1
- license2publish.be×1
- rvdj.be×1
- twitter.com×1