indexo.dev

kokstweewielers.nl

.nl crawl

First seen 2026-06-04 · Last seen 2026-06-04 · ok HTTP/1.1 200 582 ms crawled 2026-06-04

NL · 157.245.69.253 · AS14061 DigitalOcean, LLC

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Koks Tweewielers | Dé e-bike specialist
Description
Koks Tweewielers
Language
nl

Open Graph

title
Koks Tweewielers | Dé e-bike specialist
locale
nl_NL
site name
Koks Tweewielers
description
Koks Tweewielers

Technology

Server
Apache
CMS
Gatsby
jQuery
1.7.1 known XSS (<3.5)
Stack
PHP
Analytics
  • Google Tag Manager

Third-party hosts loaded (2)

  • cdn1.crossretail.nl×4
  • www.googletagmanager.com×1

Social

Contact

Phone

DNS records live

NS
  • ns1.i-aspect-infra.nl
  • ns2.i-aspect-infra.nl
MX
  • 10 kokstweewielers-nl.mail.protection.outlook.com
Verified for
  • Microsoft 365

Email authentication weak

SPF
v=spf1 include:spf.protection.outlook.com include:spf.crossretail.nl ip4:157.245.69.253 a mx ~all
softfail (~all)
DMARC
not published
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn/bL7PVj0XGD6A9YKaqUOX6YrW9X46AYUq4x68XwjCue7fuXhTvwOVpM/ZP1ERm0dM9OYj1HH1phN…
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttmM+BXNAgJB7c1gSFr47LKYQ2De8lj+8GOZ3sbpKO8vkSwz9Tj0q/ROeGrE5j9lnCSS9ZkKU3GQ3H…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhjRFoL8l0vOw3bGxKPXPnanD/dwN3Qu8OBl5BIaEP++EVs6ObljVqhuxHToiczUV5qDUpQK/fBVY1…
selectors probed

Certificate (current)

R13
from 2026-04-05 to 2026-07-04
Expires in 29 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://kokstweewielers.nl/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
findings
  • short HSTS max-age
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
content-security-policy
default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src wss://localhost:3000 https: 'unsafe-inline' 'unsafe-eval' http: 'unsafe-inline' 'unsafe-eval' *.tawk.to wss://*.tawk.to; object-src 'self'; img-src 'self' data: http: https:; media-src http: https:; font-src 'self' data: https:
strict-transport-security
max-age=600

Links to (4)

Linked from (1)