365.be

HTML metadata

Title: 365.be - An attraction for every day of the year
Description: This website is designed to offer you a foretaste of the treasures of Wallonia and Brussels! Overflowing with a fantastic choice and variety of touring ideas for all the family, our beautiful regions are home to around 250 official tourist attractions and museums to keep you entertained every day of the year. There is something here for every taste: kids will love the theme parks, animal parks and mysterious world of caves and caverns. And why not opt for a boat or railbike ride? Sports fans will enjoy our many recreational estates, water attractions and adventure parks, while culture buffs will be enchanted by the region's museums, local curiosities, historic sites and ancient monuments, castles and citadels.
Language: en
Canonical: https://www.365.be/en/

Open Graph

url: https://www.365.be/en/
title: 365.be - An attraction for every day of the year
locale: en
site name: 365.be
description: This website is designed to offer you a foretaste of the treasures of Wallonia and Brussels! Overflowing with a fantastic choice and variety of touring ideas for all the family, our beautiful regions are home to around 250 official tourist attractions and museums to keep you entertained every day of the year. There is something here for every taste: kids will love the theme parks, animal parks and mysterious world of caves and caverns. And why not opt for a boat or railbike ride? Sports fans will enjoy our many recreational estates, water attractions and adventure parks, while culture buffs will be enchanted by the region's museums, local curiosities, historic sites and ancient monuments, castles and citadels.

Technology

Analytics

Google Analytics

Fonts

Google Fonts

Third-party hosts loaded (6)

polyfill.io×3
fonts.googleapis.com×2
fonts.gstatic.com×1
s.ytimg.com×1
www.google-analytics.com×1
www.youtube.com×1

Social

DNS records live

NS

dns18.ovh.net
ns18.ovh.net

MX

10 365-be.mail.protection.outlook.com

TXT

1|www.365.be
hc0gsmisp7005hd63ta8vuaq2a
prpqs0bqadc1i8mqs961clhc5d

Verified for

Brevo
Microsoft 365

Email authentication partial

SPF

v=spf1 include:mailgun.org include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; pct=100; fo=1; ri=3600; rua=mailto:194910e4@dmarc.mailgun.org,mailto:22beb3d9@inbox.ondmarc.com,mailto:rua@dmarc.brevo.com; ruf=mailto:194910e4@dmarc.mailgun.org,mailto:22beb3d9@inbox.ondmarc.com;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCtrJWkjmRdG9B01CDmvZx5mdf68O4Leda13A8/45+rqACK7o3X1Raygx+4x7qmhCZ4tGV9Ft+k+OD…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
s1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxLunG8stu3uXgcpnaLnsyjr6ZNT6fFr33ixquuSHXpTNt9Bq17srDgZ507xI8T05ddvB3MUlARd9LwOt5Bb5QTmDSkIF…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-27 to 2026-08-28

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.365.be/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'none';connect-src 'self' www.google-analytics.com stats.g.doubleclick.net 365.matomo.cloud;font-src 'self' cdn.365.be www.365.be 365.wavenet-test.be fonts.gstatic.com cdn.jsdelivr.net;form-action 'self' login.microsoftonline.com login.windows.net reservation.elloha.com;frame-src www.youtube.com www.google.com www.meteo.be www.belgianrail.be;frame-ancestors 'self';img-src 'self' data: cdn.365.be www.365.be 365.wavenet-test.be www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net *.basemaps.cartocdn.com http://wbt2.azureedge.net agendabrussels.imgix.net cdn.wbtourisme.be walloniebelgiquetourisme.be www.youtube.com youtu.be agendabrussels2.imgix.net;manifest-src 'self' https://cdn.365.be;media-src 'self' google-analytics.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.365.be www.365.be 365.wavenet-test.be www.youtube.com www.google-analytics.com z.moatads.com https://www.googletagmanager.com s.ytimg.com www.google.com www.gstatic.com cdn.matomo.clo
strict-transport-security: max-age=31536000; includeSubDomains; preload