kerstpakkettenstop.nl
HTML metadata
Technology
- Server
- nginx
- jQuery
- 1.11.0 known XSS (<3.5)
- Stack
- PHP
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- code.jquery.com×3
- fonts.googleapis.com×1
- www.kiyoh.nl×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns1.wallgrind.net
- ns2.wallgrind.eu
- ns3.wallgrind.be
- MX
-
- 10 mail.kerstpakkettenstop.nl
Email authentication strong
- SPF
-
v=spf1 a mx ip4:212.124.67.25 ip6:2a02:2170:310:22::22 ip4:46.17.6.162 ip4:213.189.0.179 ip4:185.99.128.0/22 ip4:213.189.0.0/23 ip4:87.236.99.28 include:email.freshdesk.com include:_spf.wallgrind.nl -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; sp=none;policy: quarantine · sp=none - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 37 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- weak frame protection
- weak content type protection
Header values
- referrer-policy
no-referrer-when-downgrade, no-referrer-when-downgrade- x-frame-options
SAMEORIGIN, SAMEORIGIN- permissions-policy
geolocation=*, midi=(), sync-xhr=(self "https://kerstpakkettenstop.nl" "https://www.kerstpakkettenstop.nl"), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self "https://kerstpakkettenstop.nl" "https://www.kerstpakkettenstop.nl"), geolocation=*, midi=(), sync-xhr=(self "https://kerstpakkettenstop.nl" "https://www.kerstpakkettenstop.nl"), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self "https://kerstpakkettenstop.nl" "https://www.kerstpakkettenstop.nl" )- x-content-type-options
nosniff, nosniff- content-security-policy
block-all-mixed-content, block-all-mixed-content- strict-transport-security
max-age=31536000, max-age=31536000