mijnremeha-support.nl
HTML metadata
Technology
- Server
- Apache
- jQuery
- 3.5.1
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- OneTrust
Third-party hosts loaded (2)
- cdn.cookielaw.org×2
- www.googletagmanager.com×1
Contact
- Phone
DNS records live
- NS
-
- corey.ns.cloudflare.com
- sofia.ns.cloudflare.com
- MX
-
- 10 mail.mijnremeha-support.nl
- Verified for
-
Email authentication strong
- SPF
-
v=spf1 ip4:136.144.128.111 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;policy: reject (enforced) - DKIM
-
- default:
v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AbT/8g1P1kRjATrsxh0KoF2J1jDhJqOC2X+iXbBjMOLAep+FJ4VXo+AT9Za3vbMAk1X…
selectors probed - default:
Certificate (current)
R12
Expires in 44 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin- x-frame-options
SAMEORIGIN, SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.muntz.nl https://cloudstatic.obi4wan.com https://*.remeha.nl https://mijnremeha.nl https://mijn.remeha.nl https://mijnremeha-support.nl https://youtu.be https://www.youtube.com https://*.hotjar.com https://*.hotjar.io https://remeha-automation.nl https://*.pusher.com wss://*.pusher.com https://*.amazonaws.com https://chatapi.obi4wan.com wss://*.hotjar.com https://polyfill.io https://optimise.jibecompany.com https://www.googleadservices.com https://snap.licdn.com https://*.linkedin.com https://*.bing.com https://*.facebook.net https://*.clarity.ms https://googleads.g.doubleclick.net https://google.de https://www.google.de https://google.nl https://www.google.nl https://*.quantserve.com https://www.vbt.io https://*.quantcount.com https://*.vbout.com https://connect.facebook.net https://www.faceb