kempenslandschap.be

HTML metadata

Technology

jQuery

1.9.1 known XSS (<3.5)

Stack

PHP

Analytics

• Google Tag Manager

Third-party hosts loaded (2)

• ajax.googleapis.com×1
• www.googletagmanager.com×1

Social

• facebook
• linkedin
• instagram

DNS records live

NS

• ns.cipal.be
• ns.provant.be
• ns2.cipal.be

MX

• 10 d338293.a.ess.de.barracudanetworks.com
• 10 d338293.b.ess.de.barracudanetworks.com

TXT

• 0ed1fe018a4875c17248a44df3b420fd0cb13f53cf
• P0R4O00328

Verified for

• Dynamics 365
• Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:213.181.53.220 ip4:213.181.53.221 include:spf.ess.de.barracudanetworks.com include:hosting._spf.multimedium.be include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1;p=none;rua=mailto:dmarc@jt71jmq0.uriports.com,mailto:rua+kempenslandschap.be@dmarc.barracudanetworks.com;ruf=mailto:dmarc@jt71jmq0.uriports.com,mailto:ruf+kempenslandschap.be@dmarc.barracudanetworks.com;rf=afrf;fo=1;adkim=r;aspf=r

policy: none (monitoring only)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1+nzo2ppbfD4hpteXCsCcAH14ZY0vbl+mHE6rNCek1B6U73v7xQVUMGsdw7neLzD/SM8/beCNEz1O…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgjt//Q7V/wYOSs5I8Frzcedex1mHSl2e0u4EyUnGFBg/x+fBF0HA3zs0QeeLyuoI1ugI7Z21ndQHI…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.kempenslandschap.be/

present

• strict-transport-security

findings

• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (10)

• twitter.com×1
• spoorfietsen.be×1
• provincieantwerpen.be×1
• linkedin.com×1
• issuu.com×1
• instagram.com×1
• fortduffel.be×1
• facebook.com×1
• etuktuks.be×1
• domeinbeddermolen.be×1

Linked from (5)

• fortduffel.be×1
• spoorfietsen.be×1
• domeinbeddermolen.be×1
• etuktuks.be×1
• simonstevin.org×1