mitsubishi-liften.nl
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
- PHP
- 8.3.30 security-only
- jQuery
- 3.4.1 known XSS (<3.5)
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- ajax.googleapis.com×1
- code.jquery.com×1
- fonts.googleapis.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns0.transip.net
- ns1.transip.nl
- ns2.transip.eu
- MX
-
- 10 mitsubishiliften-nl02e.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication weak
- SPF
-
v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net include:5484214.spf05.hubspotemail.net include:_spf.elasticemail.com include:spf.whih.nl ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 57 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
frame-src *.google.com *.cookiebot.com *.hotjar.com *.youtube.com *.vimeo.com *.googletagmanager.com *.mitsubishi-liften.nl *.mitsubishi-elevators.com *.mitsubishi-aufzuege.de app.hubspot.com *.youtube-nocookie.com forms.hsforms.com js.hsforms.net;- strict-transport-security
max-age=31536000; includeSubDomains