martiniplaza.nl
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (4)
- px.ads.linkedin.com×1
- translate.google.com×1
- www.googletagmanager.com×1
- www.youtube.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns1.thednscompany.com
- ns2.thednscompany.com
- ns3.thednscompany.com
- MX
-
- 10 martiniplaza-nl.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 mx a ip4:49.13.141.103 include:spf.protection.outlook.com include:spf.mandrillapp.com include:_spf.paytsoftware.com include:spf.mtasv.net ip4:212.178.105.144/28 ip4:91.196.105.0/24 ip4:149.210.149.12/24 ip4:178.18.85.16 include:spf.mailjet.com include:spf.afas.online include:_spf.cre8ion.nl -allstrict (-all) - DMARC
-
v=DMARC1; p=none; pct=100policy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5YjMVdN3jOEIH2AMnqeofkf3iOfsVi0eWvYivokiw5lLo0B4C3pR0p2YTvCG3OvHnCBNLQO0AlWyk…
selectors probed - selector1:
Certificate (current)
R13
Expires in 76 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
unsafe-url- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=()- x-content-type-options
nosniff- content-security-policy
block-all-mixed-content; base-uri 'self'; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* *.google.com *.gstatic.com www.google-analytics.com *.addtoany.com use.fontawesome.com *.youtube.com *.ytimg.com *.googleapis.com googleapis.com *.googletagmanager.com *.cloudflare.com apps.ticketmatic.com cdn.guestplan.com etender-connect.com connect.facebook.net www.googleadservices.com googleads.g.doubleclick.net *.amazonaws.com *.browsealoud.com *.speechstream.net *.texthelp.com browsealoud-webservices-eu.texthelp.com *.google.com *.googleapis.com *.spotify.com *.brandloyalty.com smartconnections.crmplatform.nl snap.licdn.com code.jquery.com consent.cookiebot.eu consentcdn.cookiebot.eu player.vimeo.com *.leadinfo.net *.leadinfo.com cdn.ldnfrpl.com *.activehosted.com *.linkedin.com *.licdn.com static.martiniplaza.nl; style-src 'self' 'unsafe-inline' *.googleapis.com googleapis.com *.google.com *.addtoany.com cloud.typography.com *.myfonts.net *.typekit.net *.clou- strict-transport-security
max-age=31536000