100percentwinterswijk.com

HTML metadata

Title

Home | Winterswijk

Language

en

Translations

de
en
nl

Open Graph

site name: Winterswijk

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (4)

assets.plaece.nl×2
www.100procentwinterswijk.nl×1
www.100prozentwinterswijk.de×1
www.googletagmanager.com×1

Social

Contact

Address: Welcome to Winterswijk, where you will experience peace and quiet and plenty of activity. Winterswijk is incredibly versatile. Be surprised by the full agenda and sights!

Registration

Registrar

Hosting Concepts B.V. d/b/a Registrar.eu

Created

2015-12-07

Expires

2026-12-07 185 days left

Updated

2025-12-07

Name servers

ns1.openprovider.nl
ns2.openprovider.be
ns3.openprovider.eu

DNS records live

NS

ns1.openprovider.nl
ns2.openprovider.be
ns3.openprovider.eu

Email authentication no MX

SPF

v=spf1 include:relay.insiders.nl -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none;

policy: none (monitoring only) · sp=none

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscQ1dgwUV7rMwpRG+cQSFkSXLa104s4DvLrDZyAVAmOB960CSXiLzL4R6QS2MkgxCn2sgq+aX97DKBoqye…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQ/gSkxjVcck21rcy3fuRsOrlIFY4kLr1Jf9S+cAxP9WpkQjqtltko08xR+ve9ouzo5AnlgyTz8OyzheeF38oLWd…

selectors probed

Certificate (current)

R12

from 2026-04-03 to 2026-07-02

Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.100percentwinterswijk.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=*, autoplay=*, accelerometer=(), camera=(), microphone=(), usb=(), gyroscope=(), magnetometer=()
x-content-type-options: nosniff
content-security-policy: default-src https: 'unsafe-inline' 'unsafe-eval' data: blob:; block-all-mixed-content; connect-src * blob:; font-src https:; frame-ancestors 'self' https://preview.plaece.nl; frame-src *; img-src https: data: blob:; media-src https: data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; report-uri /nelmio/csp/report; worker-src https: blob:
strict-transport-security: max-age=315360000