martijnloth.be
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Nuxt
- JS framework
- Nuxt
- Analytics
-
- Cloudflare Insights
Third-party hosts loaded (2)
- res.cloudinary.com×5
- static.cloudflareinsights.com×1
Social
DNS records live
- NS
-
- emely.ns.cloudflare.com
- wilson.ns.cloudflare.com
Email authentication no MX
- SPF
-
v=spf1 -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;policy: reject (enforced) · sp=reject - DKIM
-
Show 12 DKIM selectors
- default:
v=DKIM1; p= - google:
v=DKIM1; p= - selector1:
v=DKIM1; p= - selector2:
v=DKIM1; p= - k1:
v=DKIM1; p= - k2:
v=DKIM1; p= - mail:
v=DKIM1; p= - dkim:
v=DKIM1; p= - s1:
v=DKIM1; p= - s2:
v=DKIM1; p= - mxvault:
v=DKIM1; p= - smtpapi:
v=DKIM1; p=
selectors probed - default:
Certificate (current)
WE1
Expires in 63 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-embedder-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- weak frame protection
- weak content type protection
Header values
- referrer-policy
strict-origin-when-cross-origin, strict-origin-when-cross-origin- x-frame-options
DENY, DENY- permissions-policy
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()- x-content-type-options
nosniff, nosniff- content-security-policy
base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https://res.cloudinary.com; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://static.cloudflareinsights.com 'sha256-yBd6OKJQEB8z6ZqMEam82upFBtse0I5QTvhRC9ZBEWE=' 'sha256-QjpaVA4Gi400FqSyNN8YkH5H4cSdiLRvnFv9faJhrZw=' 'sha384-stMFUrCcmRVy3/2ErPZXhzl7hDUQ7iKaN0KbV36AF6FfQQttP9o0ijYNJDEy7I0B' 'sha384-7xqmf+gjqqCDlWRJb1uRV2d69wCHez0bkrmMeXpr39baJpCpY9TGo3nJyYNvaFzV' 'sha384-2BeDt1flsuZCH8DImSFscG/vQOC7dJBNIBgjvubTNyQiMmsJBa+vZfvzQ2pPr9yz' 'sha384-bd6J6Fj8XyzV2h+wQdeKCimognjfUefwRUfWLdlOlg3mFqpEwafLy/9DoEFf57d/' 'sha384-ztMlWnVhO9s7glvrKPpH/tojGdKPEdKYjF8JCl9obc2jKQcIb+IwGTzjYUbER+NG' 'sha384-qNK0kLGkvhBOpx1ImWgmlIyWYwwphUWQx9QDL0y1EGj9BEvfmKTsTGDt/E545I6j' 'sha384-MkRA1lTH0q52Wk4wgw3uGelcTxGLgViA8x61Dyk0Dmljcc3cvn6dDip2+DfQiib7' 'sha384-wV/FyIfkoKuneA9gx32UbcC1rWydYJhlr+cMCHu0oN57ZtVcBz8nUCI/- strict-transport-security
max-age=63072000; includeSubDomains;, max-age=63072000; includeSubDomains;- cross-origin-opener-policy
same-origin- cross-origin-embedder-policy
credentialless- cross-origin-resource-policy
same-origin