indexo.dev

acato.nl

.nl crawl

First seen 2026-05-27 · Last seen 2026-05-31 · ok HTTP/1.1 200 1600 ms crawled 2026-05-30

NL · 31.7.5.154 · AS20847 Previder B.V.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Acato Digital Agency | Development, UX Design en Online Marketing
Description
Een agency met focus op strategie? Bij Acato werken we voor (inter)nationale organisaties. Strategie, development, UX en online marketing onder één dak
Language
nl-NL
Generator
WordPress 6.9.4
Canonical
https://acato.nl/

Open Graph

url
https://acato.nl/
title
Acato Fullservice Digital Agency in Den Haag, Utrecht en Didam
locale
nl_NL
site name
Acato
description
Online resultaat door de combinatie van Strategie, Development, UX-design, Online Marketing én Service en Beheer. Van website tot portaal en alles daar-tussen-in.

Technology

CMS
WordPress 6.9.4
jQuery
3.7.1
Social widgets
  • Vimeo Embed

Third-party hosts loaded (2)

  • cdnjs.cloudflare.com×3
  • player.vimeo.com×3

Social

Contact

Email
Phone

DNS records live

NS
  • ns1.shockmedia.nl
  • ns2.shockmedia.nl
  • ns3.shockmedia.nl
MX
  • 1 aspmx.l.google.com
  • 10 aspmx2.googlemail.com
  • 10 aspmx3.googlemail.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • atlassian-sending-domain-verification=6dd54b29-4859-4e8c-aa44-7c39a3f57df2
Verified for
  • Atlassian
  • Google
  • Microsoft 365

Email authentication partial

SPF
v=spf1 a mx ip6:2a03:9700:8000:1::8 ip4:185.144.225.61 ip4:31.7.5.242 ip4:31.7.5.154 ip6:2a03:9700:8000::8220 include:_spf.google.com ip4:31.7.5.79 ip4:31.7.1.8 ip4:31.7.6.150 ip6:2a03:9700:8000::6:150 ip4:5.172.44.224 ip4:31.7.5.226 ip4:37.0.94.201 include:cmail1.com include:emsd1.com include:_spf.gripp.com include:amazonses.com include:_spf.smtp.mailtrap.live ip6:2a03:9700:8000::5:79 -all
strict (-all)
DMARC
v=DMARC1; p=none; sp=quarantine; rua=mailto:dmarc@smtp.mailtrap.live,mailto:remon+dmarcreport@acato.nl; ruf=mailto:dmarc@smtp.mailtrap.live,mailto:remon+dmarcfail@acato.nl; rf=afrf; pct=100; adkim=r; aspf=r
policy: none (monitoring only) · sp=quarantine
DKIM
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed

Certificate (current)

E8
from 2026-05-02 to 2026-07-31
Expires in 59 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://acato.nl/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(self), autoplay=(), camera=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()
x-content-type-options
nosniff
content-security-policy
default-src 'self' *.acato.nl; style-src 'self' 'unsafe-inline' *.acato.nl *.vimeocdn.com cdnjs.cloudflare.com *.gstatic.com fonts.bunny.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.acato.nl *.cloudflare.com *.vimeo.com data: *.google.com *.gstatic.com *.googletagmanager.com *.salesfeed.com *.licdn.com *.doubleclick.net; font-src 'self' data: fonts.bunny.net; img-src 'self' *.acato.nl data: px.ads.linkedin.com px4.ads.linkedin.com i.vimeocdn.com *.google.com *.google.nl; connect-src 'self' *.acato.nl *.linkedin.com *.akamaized.net *.google.com *.googlesyndication.com *.doubleclick.net; frame-ancestors 'self'; frame-src 'self' *.acato.nl *.vimeo.com *.vimeocdn.com *.google.com *.doubleclick.net; child-src self *.acato.nl; block-all-mixed-content; upgrade-insecure-requests; form-action 'self'
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (5)