kapiteyn.nl
HTML metadata
Technology
- Server
- LiteSpeed
- CMS
- WordPress 6.9.4
- jQuery
- 3.4.1 known XSS (<3.5)
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (5)
- cdn.jsdelivr.net×5
- www.googletagmanager.com×2
- cdnjs.cloudflare.com×1
- code.jquery.com×1
- fonts.googleapis.com×1
Social
DNS records live
- NS
-
- ns0.nl
- ns11.net
- ns5.be
- MX
-
- 10 kapiteyn-nl.mail.protection.outlook.com
- TXT
-
Gebroeders Kapiteyn B.V.
- Verified for
-
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 ip4:128.199.35.48 ip4:37.74.215.176/29 include:spf.protection.outlook.com include:servers.mcsv.net include:spf.emailsignatures365.com include:spf.smeders.nl -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; pct=100; fo=1; ruf=mailto:dmarck-reports@kapiteyn.nlpolicy: quarantine - DKIM
-
- default:
v=DKIM1; k=rsa; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCdc7MWSPYYsa+Fu+qZst6+aYAFtMK3VWEyic/jLAoliQEUzVJn14xqJPccWrOzVnjBZoIrHtN7H… - selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMwHoiKitSNfqJXYrRKtrYa5fmB1niYqUyiTrQpQanyh0bxoJpYakOlTpyRN4H/vdL7RKRDuGftBUzGQ1c7Q… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
selectors probed - default:
Certificate (current)
R13
Expires in 62 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- missing Content Security Policy
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- strict-transport-security
max-age=31536000; includeSubDomains- content-security-policy-report-only
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.googletagmanager.com *.jquery.com *.cloudflare.com *.jsdelivr.net *.google-analytics.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.jsdelivr.net *.googleapis.com; img-src 'self' data: https:; font-src 'self' data: *.gstatic.com *.scite.ai; connect-src 'self' *.google-analytics.com *.googletagmanager.com; media-src 'self'; worker-src 'self' blob:; frame-src 'self' *.youtube.com; child-src 'self' blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri https://smeders.nl/csp/report.php