zorroo.nl
HTML metadata
Technology
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (5)
- fonts.googleapis.com×2
- fonts.gstatic.com×1
- kit.fontawesome.com×1
- www.facebook.com×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- ns1.dn-s.nl
- ns2.dn-s.be
- ns3.dn-s.eu
- ns4.dn-s.org
- MX
-
- 10 zorroo-nl.mail.protection.outlook.com
- Verified for
-
- Apple
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:_spf.mailer.twinfield.com include:spf.questmanager.nl include:spf_servers.yard.nl include:spf_cluster.yard.nl include:spf.protection.outlook.com include:servers.mcsv.net ip4:87.233.83.35 ip4:139.28.64.80 ip6:2001:9a8:0:86:87:233:83:35 -allstrict (-all) - DMARC
-
v=DMARC1; p=none; rua=mailto:spam-reports@zorroo.nlpolicy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDB+IgAh/RiGQq8xWPKe6Vh9JszjTYeijB6KV57Ur5M8BAAedgCOEs6Aalx30mwBlPEUO0h0YxmnkOZw6fI3+gn6epEO… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - default:
Certificate (current)
R13
Expires in 69 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP uses wildcard sources
- weak frame protection
- weak content type protection
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN, SAMEORIGIN- permissions-policy
accelerometer=(),autoplay=(self),camera=(),display-capture=(),encrypted-media=(),fullscreen=(*),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),xr-spatial-tracking=()- x-content-type-options
nosniff, nosniff- content-security-policy
report-uri https://o214495.ingest.us.sentry.io/api/4510721128333312/security/?sentry_key=9d841305d3bfe397d39b99bacdc72b43;base-uri 'self';connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.clarity.ms https://c.bing.com https://heatmaps.monsido.com https://pagecorrect.monsido.com wss://virtuele-gemeente-assistent.nl/ https://virtuele-gemeente-assistent.nl/ https://mijn.virtuele-gemeente-assistent.nl/ https://ka-p.fontawesome.com https://kit.fontawesome.com https://fonts.googleapis.com https://es.elk01.yard.nl/ https://elasticsearch-yard.app.owc.shockapp.io https://translate.googleapis.com https://translate-pa.googleapis.com https://maps.googleapis.com https://contentassistant.eu.siteimprove.com https://id.eu.siteimprove.com https://*.readspeaker.com https://preview.ninjateam.org https://*.timeblockr.com https://*.timeblockr.cloud https://*.api.timeblockr.cloud https://maps.gstatic.com https://www.facebook.com;default- strict-transport-security
max-age=31536000