nu91.nl
HTML metadata
Technology
- Server
- nginx
- jQuery
- 4.0.0
- Stack
- PHP
- Fonts
-
- Google Fonts
Third-party hosts loaded (1)
- fonts.googleapis.com×2
Social
Contact
DNS records live
- NS
-
- ns1.openprovider.nl
- ns2.openprovider.be
- ns3.openprovider.eu
- MX
-
- 0 nu91-nl.mail.protection.outlook.com
- TXT
-
dDr4WpKeqsnCKvmGFHCtDcBnhrhzwdJ8NnkFC/+NnwX+JNVCQEJL7l5JwQTFzLAWK3Ph3ZdLGXvI5smEeMH31w==
- Verified for
-
- Brevo
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 mx a ip4:5.61.249.246 include:spf.protection.outlook.com include:spf.mailjet.com include:spf_servers.yard.nl include:spf_cluster.yard.nl ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=quarantine; rua=mailto:dmarc@nu91.nl; ruf=mailto:dmarc@nu91.nlpolicy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/2NpWdqGfsjR3Z7hM0nkFfH4fCUQcSeaAycC6h+OYqqKV7VnJD0851zVff+dHVLThoDXTkPxO7YBodwkRMQ… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCl5Rg/bpjSxVqe2a7aIyF0k8B6zTdMvKOXhV6Qp2tsv++LpgqvTAaICH2/3rR8mm7yhg4kCSqjN4NQPbLOlM… - mail:
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed - selector1:
Certificate (current)
R12
Expires in 47 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), encrypted-media=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(self), midi=(), payment=(), publickey-credentials-get=(), usb=(), wake-lock=(), screen-wake-lock=(), web-share=(), xr-spatial-tracking=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.mailplus.nl m2.mailplus.nl maps.googleapis.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com platform.twitter.com https://www.recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google.com/jsapi https://www.gstatic.com/charts/ js.livenet; object-src 'self' youtube.com www.youtube.com vimeo.com player.vimeo.com video.vu.nl cloud.reflexappointment.nl; style-src 'self' 'unsafe-inline' static.mailplus.nl fonts.googleapis.com https://www.gstatic.com/charts/; img-src 'self' blob: data: images.unsplash.com maps.gstatic.com *.googleapis.com *.ggpht *.google-analytics.com *.analytics.google.com www.googletagmanager.com; media-src 'self'; frame-src 'self' youtube.com www.youtube.com docs.google.com www.googletagmanager.com vimeo.com player.vimeo.com video.vu.nl cloud.reflexappointment.nl https://www.recaptcha.net https://www.google.com/recaptcha/ http- strict-transport-security
max-age=31536000; includeSubDomains; preload