koggenland.nl
HTML metadata
Technology
- CMS
- Drupal
- JS framework
- Next.js
Third-party hosts loaded (3)
- cuatro.sim-cdn.nl×68
- fonts.bunny.net×1
- koggenland.logging.simanalytics.nl×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns0.transip.net
- ns1.transip.nl
- ns2.transip.eu
- MX
-
- 10 koggenland-nl.y-v1.mx.microsoft
- TXT
-
Show 17 TXT records
zpwrxghd7k1j6djqqjg39jcy1gb6q30f5b1yft6z7bxzjlwrkfpc7tltjfxtbxllQuoVadis=637d792c-5a2f-4cee-8710-b3a12c234a387bbc8cfa-a62f-424a-8f27-d2b9635af615-310720181WSWnvU5I0TnXwz+3b8hdXqGVsBN6UpXfYpuj/j+l69qGETqnJ8/n7GsCX5xYsvxOy3TWSXWpT1Jt9OOwJSUiQ==_5brn134t3pyqute0dwmbug9vyjl1ngkLMM60X4cAZx+EXZb6WOec6daiyBFkRe2gCFAxPMgtKDyK1g1IQqcNodiAsQk4XQADVavzOMF8AUq3MlnHEPBjw==v=NTA7516-1;startdate=2019-06;enddate=2029-09;provider=bastionic;ntamx=10 mx.bastion365.net_g890pkchdxfa4yns1201237om5i8khpQuoVadis=f16774a6-4d8b-4ab7-8a45-e7093c3adcf7z7k9j6p3fnb3k0d2b46bbm8dpw25s0pdQuoVadis=48d7221c-d63c-4fac-ba61-1a65cd7ff86abastion365-domain-validation=5d813c8e59a16vrmd6qj5ykkxc9394zf8m1svms7kb42zQuoVadis=55f995ec-8a34-4641-9031-752d5958d64dQuoVadis=7525ad67-37f2-465b-b221-cc429facbf74_mjtap9bhmo6addkan4x3hvh1mh9zq3p
- Verified for
-
- 1Password
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 ip4:185.30.237.181 ip4:185.136.64.128/27 ip4:185.136.65.128/27 ip4:45.80.232.20/30 ip4:85.90.85.193 ip4:85.90.85.177 ip4:80.69.70.5 ip4:87.253.129.5 ip4:87.253.129.6 ip4:87.253.129.7 ip4:87.253.129.8 ip4:87.253.129.9 ip4:217.17.197.73 ip4:217.17.197.208 ip4:185.49.50.14 ip4:185.181.140.71 ip4:185.181.140.32 ip4:185.8.52.254 ip4:213.206.205.107 ip4:185.6.163.224/27 include:spf.simgroephosting.nl include:spf.protection.outlook.com include:sendgrid.net include:spf.eprov.nl include:spf.topdesk.net include:spf.digitaalnachtregister.com include:_spf.mail.services.bastion365.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:emynpvub@ag.eu.dmarcadvisor.com; ruf=mailto:emynpvub@fr.eu.dmarcadvisor.com;policy: reject (enforced) - DKIM
-
Show 4 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11tCazsB5rwZMjpXlFXcLtDFm4LlIrswGs7KRqhUAffgp6c9XrpNcQ5Mj5Bh7JQsEm3/uI0L9cpHeB… - k1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBS96F0nzm6hFo8mRnB31d6B4hpODHZEioRG27Cy5W0PD8tw0JtltYdZ1Q1w+n6TcLZvtITaAnM1k70s9t/o… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP3s/ClpoRIfn0duRrhhMSD/RxKRT6VnR/E0k+EyR9VX6AAliQ9NbV6Tk7LrBzvV9LqYldiAOpNMYb8Ukq… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA82kgv79KVuhrgvB9Fkp5vxGwsHLouvUZOFPX6N6Yz4F0l1nBPUXUlGqct9O12ybi/OarhmZrUj/zz9p4kLAs+Q…
selectors probed - selector1:
Certificate (current)
Thawte TLS RSA CA G1
Expires in 157 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- content-security-policy-report-only
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-content-type-options
nosniff- content-security-policy
default-src 'self'; img-src * data: 'unsafe-inline' blob:; style-src * 'unsafe-inline' blob:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src *; form-action *; media-src *.readspeaker.com *.streamlock.net *.archieven.nl storage.googleapis.com scribit-pro-hosting.storage.googleapis.com scribit-pro.storage.googleapis.com app.talkjs.com *.bbvms.com *.cloudfront.net data: 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:;- strict-transport-security
max-age=31536000- content-security-policy-report-only
default-src 'self'; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://fonts.googleapis.com https://*.tolkie.nl; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl https://*.tolkie.nl; script-src 'nonce-OGM5ODU1MDUtOGRhMC00ZThmLWJjMTAtZjhlZDNiYzA0MWU2' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report