indexo.dev

mijn-hvkstevens.com

.com crawl

First seen 2026-04-26 · Last seen 2026-05-16 · ok HTTP/1.1 200 1060 ms crawled 2026-05-19

NL · 185.46.183.74 · AS60781 LeaseWeb Netherlands B.V.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Inloggen - Mijn HVK Stevens - NL
Language
nl

Open Graph

url
https://www.mijn-hvkstevens.com/inloggen-prs/standaard?url=%2f
title
Inloggen

Technology

CMS
Gatsby

Registration

Registrar
NextName B.V.
Created
2022-03-31
Expires
2027-03-31 314 days left
Updated
2026-04-01
Name servers
  • ns23.iclicks.nl
  • ns24.iclicks.nl

DNS records live

NS
  • ns23.iclicks.nl
  • ns24.iclicks.nl
MX
  • 10 mail.mijn-hvkstevens.com

Email authentication weak

SPF
v=spf1 a mx ip4:213.159.24.10 include:_spf.mijnspamfilter.nl ip4:185.46.183.74 ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-04-25 to 2026-07-24
Expires in 65 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.mijn-hvkstevens.com/login?url=%2f

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Permissions Policy
Header values
referrer-policy
same-origin
x-content-type-options
nosniff
content-security-policy
default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline';script-src * data: blob: 'unsafe-inline' 'unsafe-eval';connect-src * data: blob: 'unsafe-inline';img-src * data: blob: 'unsafe-inline';frame-src * data: blob: ;style-src * data: blob: 'unsafe-inline';font-src * data: blob: 'unsafe-inline';frame-ancestors * data: blob: ;
strict-transport-security
max-age=31536000

Linked from (1)