vetcompendium.be
HTML metadata
Technology
- Server
- nginx
- CMS
- Drupal
Third-party hosts loaded (1)
- cdn.jsdelivr.net×1
Social
Contact
DNS records live
- NS
-
- ns1.european-server.eu
- ns3.european-server.com
- ns4.european-server.com
- MX
-
- 10 mx.mailprotect.be
- 50 mx.backup.mailprotect.be
- Verified for
-
Email authentication weak
- SPF
-
v=spf1 a include:_spf.relay.mailprotect.be include:_spf.createsend.com include:mailgun.org -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 42 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' *.googletagmanager.com *.google-analytics.com *.googleapis.com *.google.be cdn.jsdelivr.net 'sha256-rDvGYcwJIm0O5xILZwMcFNSRIq2NrrCbRtGLgyu3ICk=' 'sha256-NYOs9LmmZC/S7ozkaRCMeavjt1Oak4e6swTxdCAS+yo=' 'sha256-pqld7bJitOme2HRS4UQ4WPiIVjXSorhiTipEwJitbrk='; object-src 'none'; style-src 'self' 'unsafe-inline' *.googleapis.com; img-src 'self' data: *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.ytimg.com; media-src 'self'; frame-src 'self' *.vimeo.com *.youtube.com *.googletagmanager.com; frame-ancestors 'self' *.vimeo.com *.youtube.com; child-src 'none'; font-src 'self' *.gstatic.com; connect-src 'self' *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com; report-uri /report-csp-violation; upgrade-insecure-requests- strict-transport-security
max-age=31536000;
Links to (6)
- twitter.com×1
- linkedin.com×1
- fagg.be×1
- facebook.com×1
- bcfi.be×1
- artmania.net×1
Linked from (1)
- bcfi.be×1