kinderontvoering.org

HTML metadata

Technology

jQuery

3.3.1 known XSS (<3.5)

Analytics

• Google Tag Manager

Third-party hosts loaded (2)

• ajax.googleapis.com×2
• www.googletagmanager.com×2

Social

• linkedin
• youtube
• instagram

DNS records live

NS

• cody.ns.cloudflare.com
• lisa.ns.cloudflare.com

MX

• 0 kinderontvoering-org.mail.protection.outlook.com

TXT

• v=DMARC1; p=reject; rua=mailto:dmarc@kinderontvoering.org; ruf=mailto:dmarc@kinderontvoering.org; sp=reject; aspf=s;

Email authentication partial

SPF

v=spf1 a mx ip4:85.17.117.185 ip4:94.210.130.74 include:spf.protection.outlook.com include:sendgrid.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSrYrPyXf0HHLh3TN0zN7QDCLOkLHdN9GsrIom1IB/oU1uAtbTB6Nnh6GyFYqUZY1y7CC8ySD+1A8w…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i6EZZHONWDLgenWT1LCtL+nlt64HDSY4/brPM1T4KH7Fnln0q8PZ1DIXdM3dVNpEYaAJJpKmSfid0sr0b…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6iEp9mbPmaddD9gQUfUsqYqLazseGNWbj+glJ9E2guxgd4AgApj5FjSIkT3a3YcHAHdS2fgPcZVfTedZm…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://kinderontvoering.org/

present

• strict-transport-security
• x-frame-options
• x-content-type-options

findings

• short HSTS max-age
• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (22)

• youtube.com×1
• verenigingfas.nl×1
• rvr.org×1
• rijksoverheid.nl×1
• rechtspraak.nl×1
• politie.nl×1
• om.nl×1
• missingchildreneurope.eu×1
• linkedin.com×1
• lepca.eu×1
• leceergerelateerdgeweld.nl×1
• instagram.com×1
• ind.nl×1
• icali.it×1
• hcch.net×1
• diallawyers.org×1
• defensie.nl×1
• crossbordermediator.eu×1
• childfocus.be×1
• childabductionlawyers.org.uk×1
• asime.org×1
• 116000.nl×1

Linked from (2)

• juridischelinks.nl×1
• agplaw.com×1