indexo.dev

labconsult.be

.be crawl

First seen 2026-06-03 · Last seen 2026-06-03 · ok HTTP/1.1 200 539 ms crawled 2026-06-03

NL · 13.95.70.73 · AS8075 Microsoft Corporation

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Your partner in Life Science - labconsult.be
Description
Labconsult
Language
en

Open Graph

url
https://labconsult.be/
title
Your partner in Life Science
site name
labconsult.be

Technology

Server
Microsoft-IIS
jQuery
2.2.3 known XSS (<3.5)
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts
Third-party hosts loaded (7)
  • res.cloudinary.com×36
  • ajax.aspnetcdn.com×4
  • ajax.googleapis.com×1
  • code.jquery.com×1
  • fonts.googleapis.com×1
  • maxcdn.bootstrapcdn.com×1
  • www.googletagmanager.com×1

Contact

Email
Phone

DNS records live

NS
  • ns1.combell.eu
  • ns3.combell.net
  • ns4.combell.net
MX
  • 0 labconsult-be.mail.protection.outlook.com
Verified for
  • Google

Email authentication partial

SPF
v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net -all
strict (-all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36
from 2026-01-23 to 2027-02-23
Expires in 263 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://labconsult.be/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
Deny
x-content-type-options
nosniff
content-security-policy
default-src 'self' https://www.google.com https://maps.google.com services.cognitoforms.com https://www.cognitoforms.com https://www.youtube.com http://www.youtube.com file://www.youtube.com/embed/;script-src 'self' ajax.googleapis.com ajax.aspnetcdn.com maxcdn.bootstrapcdn.com code.jquery.com cdn.datatables.net https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com maxcdn.bootstrapcdn.com cdn.datatables.net;img-src 'self' res.cloudinary.com https://www.googletagmanager.com data: cdn.datatables.net https://www.google-analytics.com;font-src 'self' https://fonts.gstatic.com maxcdn.bootstrapcdn.com;connect-src 'self' https://region1.google-analytics.com https://www.google.com https://www.gstatic.com http://cdn.datatables.net/plug-ins/9dcbecd42ad/i18n/;form-action 'self';upgrade-insecure-requests;report-uri /WebResource.axd?cspReport=true

Links to (25)

Linked from (1)