yappa.be

HTML metadata

Title: Yappa | Jou doen groeien. Bewust.
Description: We staan je graag digitaal bij in de groei van je onderneming. Contacteer ons voor een vrijblijvend gesprek.
Language: nl

Open Graph

title: Yappa | Jou doen groeien. Bewust.
site name: Yappa
description: We staan je graag digitaal bij in de groei van je onderneming. Contacteer ons voor een vrijblijvend gesprek.

Technology

Server: nginx
Stack: PHP

Analytics

Google Tag Manager

Third-party hosts loaded (4)

www.google.com×2
load.sumo.com×1
www.googletagmanager.com×1
www.gstatic.com×1

Social

Contact

Email

hallo@yappa.be

Phone

003211740696

DNS records live

NS

ns1.combell.eu
ns3.combell.net
ns4.combell.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

zup46o2rexytush3o7shjy9w1xpr2psq
MS=00A5BD886BB2670C240D7AE46822A20F000B7EA2
gkSIDMRG4Sze2iyt3RRkTUxoiVRurjjt

Verified for

1Password
Anthropic
Atlassian
Google
Meta

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:_spf.createsend.com include:sendgrid.net include:emsd1.com include:spf.orbit.teamleader.eu include:_spf.nameweb.biz -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:gk9nzso3@ag.eu.dmarcadvisor.com; pct=100;

policy: quarantine

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3P/u8NlwUZNOFiHxcc8BOLGG+TKgT5c0UnInGYF95IhU5CsjjdaitqYy5/pujhL6pVkLG3R4QD5XzrhG8dP…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY2frppj9VPLbfsd1vRMqxy/O9mOp4pjV3fpJl9S+F1/vrok2zGzh4htZeaDH+tDXEqFxsFvI336bZMD6a…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDcQpivXjHLChCxlSWsL3CSzyf6Ri/mFPYfwdehSjTBHxXi73tAzZ9MuuOlY0ZPkUFfaexDJAdUjPLpTyQiYgIQts…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

R12

from 2026-05-15 to 2026-08-13

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.yappa.be/nl

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(), camera=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'
strict-transport-security: max-age=31536000; includeSubDomains; preload