hvmic.nl

HTML metadata

Technology

Server

nginx

PHP

8.2.31 security-only

jQuery

1.11.0 known XSS (<3.5)

Stack

PHP

Analytics

• Google Tag Manager

Third-party hosts loaded (3)

• ajax.googleapis.com×1
• s7.addthis.com×1
• www.googletagmanager.com×1

Social

• twitter
• facebook

DNS records live

NS

• ns1.bhosted.nl
• ns3.bhosted.nl
• ns4.bhosted.nl

MX

• 0 hvmic-nl.mail.protection.outlook.com

Email authentication partial

SPF

v=spf1 a mx ip4:62.212.72.114 ip4:62.212.72.93 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

• default: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4lur7WDuqPqCTWlYUVu5RTjvRDtbn2gvUGrbWhmU/OVtHbI2aZoJoeu1W6Fv+z4HRHdbEV3vnc/Ili6bFX1Rub+xjf…
• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+oepr1P3A8KavZetQi5v8+CcWkqV0iRYSUawLXUQv77Ph77Red2rFew455rwxBk6tmzyPS0LVYStW…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.hvmic.nl/home/

present

• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (19)

• twitter.com×1
• tijshillen.nl×1
• sportcafemarsana.nl×1
• scooterservicezuid.nl×1
• rovisport.nl×1
• robcreemers.com×1
• pubhenry.nl×1
• medischefitness.nl×1
• label-a-hair-salon.nl×1
• hotelwalram.nl×1
• hc-architecten.nl×1
• flickr.com×1
• facebook.com×1
• es-ruipers.nl×1
• cafedekeizermeerssen.nl×1
• avprojects.nl×1
• autoservicemeerssen.nl×1
• alexmaastricht.nl×1
• advacom.nl×1

Linked from (1)

• handbalschool-limburg.nl×1