indexo.dev

sovac.be

.be crawl

First seen 2026-06-02 · Last seen 2026-06-02 · ok HTTP/1.1 200 1210 ms crawled 2026-06-02

FR · 5.196.134.168 · AS16276 OVH SAS

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
verwarmingsonderdelen Overijse | Sovac : Stephan Perneel, verwarmingsinstallatie
Description
Sovac in Overijse verdeelt reeds sinds 1945 verwarmingsprodcuten en sanitaire installaties, en is vertegenwoordiger van enkel de beste merken zoals faral aluminium radiatoren! Deze kunnen binnen de 24 uur bij u worden afgeleverd.
Language
nl
Canonical
https://www.sovac.be/

Open Graph

url
https://www.sovac.be/
title
verwarmingsonderdelen Overijse | Sovac : Stephan Perneel, verwarmingsinstallatie
description
Sovac in Overijse verdeelt reeds sinds 1945 verwarmingsprodcuten en sanitaire installaties, en is vertegenwoordiger van enkel de beste merken zoals faral aluminium radiatoren! Deze kunnen binnen de 24 uur bij u worden afgeleverd.

Technology

Server
Apache
jQuery
1.9.1 known XSS (<3.5)
Stack
PHP

Third-party hosts loaded (1)

  • cdnnen.proxi.tools×20

Contact

Email
Phone
Address
Victor Marchandstraat 17, 3090, Overijse, BE

DNS records live

NS
  • ns1.proximedia.com
  • ns2.proximedia.be
MX
  • 0 sovac.in.tmes.trendmicro.eu
TXT
  • tmes=b4bda496ff2fb2af904175cfc1d64dde
Verified for
  • Microsoft 365

Email authentication partial

SPF
v=spf1 mx a ip4:178.32.24.37 ip4:151.80.73.0/24 a:notos.online.be a:smtp.online.be include:spf.ymlp.com include:spf.protection.outlook.com include:spf.tmes.trendmicro.com ?all
neutral (?all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc@csdg.org
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-05-06 to 2026-08-04
Expires in 63 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.sovac.be/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), camera=(), microphone=(), payment=(), fullscreen=(self)
x-content-type-options
nosniff
content-security-policy
default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
strict-transport-security
max-age=31536000;

Links to (3)

Linked from (1)