nsg.nl
HTML metadata
Technology
- Server
- Apache
Contact
- Phone
DNS records live
- NS
-
- ns3.ii.nl
- ns4.ii.nl
- MX
-
- 10 mail1.ii.nl
- 30 mail2.ii.nl
- 70 mail4.ii.nl
Email authentication partial
- SPF
-
v=spf1 a mx include:satserver.nl ?include:spf.protection.outlook.com include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=none;sp=none;pct=100;rua=mailto:dmarcreports@ii.nl;ruf=mailto:dmarcreport@ii.nlpolicy: none (monitoring only) · sp=none - DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 29 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy-report-only
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing Content Security Policy
- missing frame protection
Header values
- referrer-policy
origin-when-cross-origin- permissions-policy
interest-cohort=()- x-content-type-options
nosniff- strict-transport-security
max-age=15768000; includeSubDomains- content-security-policy-report-only
default-src 'none'; base-uri 'self'; child-src 'self' *.facebook.com accounts.google.com apis.google.com platform.twitter.com; connect-src 'self' https://webpush.ii.nl/ www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net osm.ii.nl; font-src 'self' fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' *.facebook.com accounts.google.com apis.google.com platform.twitter.com; img-src 'self' data: *.ii.nl blob: nsg.nl *.twitter.com www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net googletagmanager.com; manifest-src 'self'; media-src 'none'; object-src 'none'; report-uri /csp-report; script-src 'self' apis.google.com platform.twitter.com www.google-analytics.com ssl.google-analytics.com 'sha256-tBHGIR4dWmk75PpaTY1K3DWR+SNawrCFuREjZCtWwIQ=' 'sha256-8fbblCTXRE3/JBjzmBXwmV1QN8PMWcpTYqpZlxWvkkw='; style-src 'unsafe-inline' 'self' fonts.googleapis.com