wijheemstede.nl
HTML metadata
Technology
- Server
- Caddy
- CMS
- WordPress
- jQuery
- 3.7.1
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- fonts.googleapis.com×4
- fonts.gstatic.com×1
- www.googletagmanager.com×1
Contact
- Phone
DNS records live
- NS
-
- ns01.hostnet.nl
- ns02.hostnet.nl
- MX
-
- 0 wijheemstede-nl.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:spf.mailjet.com ip4:213.108.108.63 ip4:213.108.108.11 ip4:213.108.108.15 ip4:213.108.108.18 ip4:213.108.108.19 ip4:213.108.108.20 ip4:213.108.108.32 ip4:213.108.108.120 ip4:213.108.108.121 ip4:213.108.110.207 ip4:213.108.110.239 ip4:213.108.110.241 ip4:213.108.110.249 ip4:213.108.110.250 ip4:213.108.110.251 ip6:2a00:c6c0:0:133:5::/80 ip6:2a00:c6c0:0:116:1::/80 ip6:2a00:c6c0:0:108:5::/80 ip6:2a00:c6c0:0:136:1::/80 ip4:223.165.113.0/24 ip4:223.165.115.0/24 ip4:223.165.118.0/23 ip4:223.165.120.0/23 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 ip4:31.134.205.0/27 ip4:52.232.112.100 ip4:5.39.175.241 ip4:212.178.74.114 ip4:92.70.24.202 ip4:149.72.51.206 include:spf.protection.outlook.com -allstrict (-all) - DMARC
-
v=DMARC1; p=nonepolicy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3M4SAdPE/z3gmzZvoRagkgZNEfU6X3sPdbVGGGHd8hS6KcCStz6uEQEOdDO447NUuZXcNehfY4or7DqcTeq… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - selector1:
Certificate (current)
E7
Expires in 80 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
autoplay=*, fullscreen=*, geolocation=*- x-content-type-options
nosniff- content-security-policy
default-src 'self' blob: https: wss: data: 'unsafe-inline' 'unsafe-eval'; worker-src blob:- strict-transport-security
max-age=31536000