Summary
A Concise Overview of the scan result of url https://www.mollie.com/checkout/select-method/PkZamBiAiv
- Document
- HTML
- 2
- StyleSheets
- 2
- Scripts
- 7
- Font
- 0
- Images
- 10
- Links
- 0
- JavaScript Variables
- 13
- Console log messages
- 0
- Network
- Requests
- 23
- Bytes Transferred
- 182.36KB
- Bytes Total
- 485.49KB
- DNS Record
- CNAME Record
- 2
- A Record
- 1
- Technology
- Ecommerce
- 1
- Webmail
- 1
- CRM
- 1
- Operating systems
- 1
- IaaS
- 1
- PaaS
- 1
- Web servers
- 1
- Documentation
- 1
- Issue trackers
- 1
- Live chat
- 1
- Analytics
- 2
- JavaScript libraries
- 2
- Security
- 1
- CDN
- 2
- RUM
- 1
- Miscellaneous
- 2
Document
Links
The outgoing links identified from the page.
Link | Text |
---|
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
Technology
The technologies identified are present on the scanned URL.
Name | Description | Detected patterns |
---|---|---|
Documentation | ||
Zendesk | Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities. | Type: dns Regex: mail\.zendesk\.com |
Ecommerce | ||
Cart Functionality | Websites that have a shopping cart or checkout page, either using a known ecommerce platform or a custom solution. | Type: url Regex: \/(?:cart|order|basket|trolley|bag|shoppingbag|checkout) |
Analytics | ||
Mixpanel | Mixpanel provides a business analytics service. It tracks user interactions with web and mobile applications and provides tools for targeted communication with them. Its toolset contains in-app A/B tests and user survey forms. | Type: dns Regex: mixpanel-domain-verify |
Datadog | Datadog is a SaaS-based monitoring and analytics platform for large-scale applications and infrastructure. | Type: scriptSrc Regex: www\.datadoghq-browser-agent\.com |
Issue trackers | ||
Zendesk | Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities. | Type: dns Regex: mail\.zendesk\.com |
Security | ||
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
Miscellaneous | ||
HTTP/3 | HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web. | Type: headers Name: alt-svc Regex: h3 |
DocuSign | DocuSign allows organisations to manage electronic agreements. | Type: dns Regex: docusign |
Web servers | ||
Apache HTTP Server | Apache is a free and open-source cross-platform web server software. | Type: headers Name: server Regex: (?:Apache(?:$|\/([\d.]{1,250})|[^\/-])|(?:^|\b)HTTPD) |
Operating systems | ||
Debian | Debian is a Linux software which is a free open-source software. | Type: headers Name: server Regex: Debian |
Webmail | ||
Apple iCloud Mail | Apple iCloud Mail is a webmail service provided by Apple, Inc. | Type: dns Regex: apple-domain |
CDN | ||
Google Cloud CDN | Cloud CDN uses Google's global edge network to serve content closer to users. | Type: headers Name: via Regex: ^1\.1 google$ |
Amazon S3 | Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface. | Type: headers Name: server Regex: s3[^ ]{0,250}amazonaws\.com |
Live chat | ||
Zendesk | Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities. | Type: dns Regex: mail\.zendesk\.com |
CRM | ||
Salesforce | Salesforce is a cloud computing service software (SaaS) that specializes in customer relationship management (CRM). | Type: dns Regex: salesforce\.com |
JavaScript libraries | ||
jQuery | jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. | Type: scriptSrc Regex: jquery |
Clipboard.js | Type: scriptSrc Regex: clipboard(?:-([\d.]{1,250}))?(?:\.min)?\.js | |
PaaS | ||
Amazon Web Services | Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. | Dependent on Amazon S3 |
IaaS | ||
Google Cloud | Google Cloud is a suite of cloud computing services. | Dependent on Google Cloud CDN |
RUM | ||
Datadog | Datadog is a SaaS-based monitoring and analytics platform for large-scale applications and infrastructure. | Type: scriptSrc Regex: www\.datadoghq-browser-agent\.com |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 85 msGood
- requestTime
- 7 msGood
- dom
- 178 msGood
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
Type | Name | Content | DNSSEC |
---|---|---|---|
CNAME | www.mollie.com | mollie.com. | yes |
A | mollie.com | 34.128.165.251 | yes |
CNAME | www.mollie.com | mollie.com. | yes |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
Subject | Issue date | Expiry date | Valid |
---|---|---|---|
mollie.com R10 | 8/14/2024 | 11/12/2024 | 2 months 29 days |
*.sentry-cdn.com GlobalSign Atlas R3 DV TLS CA 2024 Q2 | 6/4/2024 | 7/6/2025 | 1 year 1 month 1 day |
js.pusher.com Amazon RSA 2048 M03 | 3/13/2024 | 4/10/2025 | 1 year 28 days |
*.s3.eu-central-1.amazonaws.com Amazon RSA 2048 M01 | 8/2/2024 | 7/30/2025 | 12 months 2 days |
ingest.sentry.io DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 11/2/2023 | 12/2/2024 | 1 year 1 month 1 day |
*.datadoghq-browser-agent.com DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 7/30/2024 | 8/3/2025 | 1 year 4 days |
pusher.com Amazon RSA 2048 M03 | 5/26/2024 | 6/24/2025 | 1 year 29 days |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
Name | Value |
---|---|
alt-svc | h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 |
content-encoding | gzip |
content-length | 4711 |
content-security-policy | default-src 'self'; script-src 'nonce-005c3d3aec637f4e' 'self' https://*.mollie.com https://*.pusher.com https://*.sentry-cdn.com https://www.datadoghq-browser-agent.com https://pay.google.com/gp/p/js/pay.js; style-src 'self' https://*.mollie.com https://mollie.com 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://*.mollie.com https://fonts.gstatic.com; connect-src 'self' wss://js.mollie.com wss://*.pusher.com https://*.pusher.com https://*.sentry.io https://*.browser-intake-datadoghq.eu https://pay.google.com https://google.com https://www.google.com; img-src 'self' data: https://*.ideal.nl https://*.payconiq.com https://linkmaker.itunes.apple.com/ https://play.google.com/ https://developer.apple.com/ https://mollie-production.s3.eu-central-1.amazonaws.com https://mollie.com https://*.mollie.com https://www.gstatic.com; media-src 'self'; object-src 'self' data:; child-src blob:; frame-src 'self' https://js.mollie.com https://static.api.mcpp.mollie.com/ https://pay.mollie.nl https://pay.google.com https://cards-processing.mollie.com; worker-src 'self' blob:; frame-ancestors 'self'; base-uri https://www.mollie.com/; manifest-src 'self'; report-uri https://o29109.ingest.sentry.io/api/4506218101997568/security/?sentry_key=e5c61cf4233c5ae20b57c21ec3e9801c&sentry_environment=production&sentry_release=7fcd344d4d116321bcce9db20d82474a53c63233 |
content-type | text/html; charset=UTF-8 |
date | Wed, 02 Oct 2024 18:03:03 GMT |
server | Apache/2.4.62 (Debian) |
strict-transport-security | max-age=31536000; includeSubDomains; preload |
traceparent | 00-7d5ee8efd31ca7d8f36e8000db911f27-2565384525900650047 |
vary | Accept-Encoding |
via | 1.1 google, 1.1 google |
x-frame-options | DENY |
x-xss-protection | 1; mode=block |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
Name | Value |
---|---|
default-src | 'self' |
script-src | 'nonce-005c3d3aec637f4e''self'https://*.mollie.comhttps://*.pusher.comhttps://*.sentry-cdn.comhttps://www.datadoghq-browser-agent.comhttps://pay.google.com/gp/p/js/pay.js |
style-src | 'self'https://*.mollie.comhttps://mollie.com'unsafe-inline'https://fonts.googleapis.com |
font-src | 'self'https://*.mollie.comhttps://fonts.gstatic.com |
connect-src | 'self'wss://js.mollie.comwss://*.pusher.comhttps://*.pusher.comhttps://*.sentry.iohttps://*.browser-intake-datadoghq.euhttps://pay.google.comhttps://google.comhttps://www.google.com |
img-src | 'self'data:https://*.ideal.nlhttps://*.payconiq.comhttps://linkmaker.itunes.apple.com/https://play.google.com/https://developer.apple.com/https://mollie-production.s3.eu-central-1.amazonaws.comhttps://mollie.comhttps://*.mollie.comhttps://www.gstatic.com |
media-src | 'self' |
object-src | 'self'data: |
child-src | blob: |
frame-src | 'self'https://js.mollie.comhttps://static.api.mcpp.mollie.com/https://pay.mollie.nlhttps://pay.google.comhttps://cards-processing.mollie.com |
worker-src | 'self'blob: |
frame-ancestors | 'self' |
base-uri | https://www.mollie.com/ |
manifest-src | 'self' |
report-uri | https://o29109.ingest.sentry.io/api/4506218101997568/security/?sentry_key=e5c61cf4233c5ae20b57c21ec3e9801c&sentry_environment=production&sentry_release=7fcd344d4d116321bcce9db20d82474a53c6323 |
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
Name | Value | Domain/Path | Expires | Secure | HTTP Only |
---|---|---|---|---|---|
plink_locale | en | paymentlink.mollie.com/ | 12/31/1969, 11:59:59 PM | yes | yes |
plink | 4a18u4g3gu3r5rba55ogimb9ac | paymentlink.mollie.com/ | 10/9/2024, 6:03:02 PM | yes | yes |
_dd_s | rum=0&expire=1727893083961 | www.mollie.com/ | 10/2/2024, 6:18:03 PM | no | no |