merpo.nl

HTML metadata

Technology

Server

Apache

PHP

7.4.33 end of life

jQuery

1.12.4 known XSS (<3.5)

Stack

PHP

Analytics

• Google Tag Manager

Cookie consent

• Cookiebot

Social widgets

• YouTube Embed

Third-party hosts loaded (6)

• cdnjs.cloudflare.com×1
• consent.cookiebot.com×1
• kit.fontawesome.com×1
• maps.googleapis.com×1
• www.googletagmanager.com×1
• www.youtube.com×1

Social

• linkedin
• instagram
• youtube

Contact

Email

• info@merpo.nl
• swalmeninfo@merpo.nl

Phone

• +31475600311

DNS records live

NS

• ns1.ictivate.com
• ns2.ictivate.com

MX

• 10 merpo-nl.mail.protection.outlook.com

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com include:spf.afas.online include:_spf.mailer.twinfield.com ip4:141.138.140.153 -all

strict (-all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://merpo.nl/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (5)

• youtube.com×1
• mytrans5.nl×1
• linkedin.com×1
• instagram.com×1
• frogdesign2.nl×1

Linked from (1)

• familiebaddebosberg.nl×1