averoachmea.nl

HTML metadata

Title: Welkom bij Avéro Achmea | De waarde van advies
Description: Lees waarom Avéro Achmea gelooft in dé waarde van advies en dé partner voor de zakelijke markt is.
Language: nl
Canonical: https://www.averoachmea.nl/

Technology

CMS: Gatsby
Stack: ASP.NET

Third-party hosts loaded (1)

avr.imgix.net×6

Social

Contact

Address: Laan van Malkenschoten 20, 7300 AC, Apeldoorn, Gelderland, The Netherlands

Registration

Registrar

Novagraaf Nederland B.V.

Created

2000-06-03

Updated

2025-12-11

Name servers

ns02.brandshelter.net
ns01.brandshelter.com

DNS records live

NS

ns01.brandshelter.com
ns02.brandshelter.net

MX

10 averoachmea-nl.mail.protection.outlook.com

TXT

CdNmqkwuIlDhAu2Ayp0N8eb+cLN5NFXk6AG2LuJ53BA=
_z9hl842tpwcbma530up41eac0ucgnt4

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.mailrelay.achmea.nl ip4:145.219.8.32 ip4:145.219.8.33 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=reject;rua=mailto:m6panlfh@ag.eu.dmarcadvisor.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8k6pE+I7FW4mEJM1ipb/Ifp4gsogyyy/4uIuufVBLHU+j9gAtGcOqfkqCTRNh+qfsREwb1rsQoZCJf…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMT/Uycs2wxiy7XwAy0pMy09uutldEXdTHmVYICIg8eqXe6kZNzPjMlbBEokEOpteSU0y8T+hiNjec…

selectors probed

Certificate (current)

DigiCert QuoVadis 2G3 TLS RSA4096 SHA384 2023 CA1

from 2026-04-20 to 2026-11-05

Expires in 157 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.averoachmea.nl/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.relay42.com 6162542.fls.doubleclick.net;script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.averoachmea.nl *.doubleclick.net *.facebook.net *.google.com *.googlesyndication.com *.hs-scripts.com *.linkedin.com *.r42tag.com *.relay42.com *.svtrd.com *.usabilla.com achmeadpm.achmea.nl:9999 ajax.googleapis.com api.usabilla.com app.contentsquare.com bat.bing.com cba.nmrc.nl cdn.ampproject.org cdn.harvest.graindata.com d6tizftlrpuof.cloudfront.net googleads.g.doubleclick.net https://www.googleoptimize.com https://www.googletagmanager.com js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hsleadflows.net js.monitor.azure.com js.usemessages.com maps.googleapis.com player.quadia.net r.bing.com snap.licdn.com static.cloud.coveo.com surfly.com t.contentsquare.net tags.nmrc.nl www.dwin1.com www.google-analytics.com www.googleadservices.com www.youtube.com www.zenaps.com www.awin1.com https://api-engage-eu.sitecorecloud.io https://d35vb5cccm4xzp.cloudfront.net https:
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy-report-only: default-src 'self' *.relay42.com 6162542.fls.doubleclick.net;script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.averoachmea.nl *.doubleclick.net *.facebook.net *.google.com *.googlesyndication.com *.hs-scripts.com *.linkedin.com *.r42tag.com *.relay42.com *.svtrd.com *.usabilla.com achmeadpm.achmea.nl:9999 ajax.googleapis.com api.usabilla.com app.contentsquare.com bat.bing.com cba.nmrc.nl cdn.ampproject.org cdn.harvest.graindata.com d6tizftlrpuof.cloudfront.net googleads.g.doubleclick.net https://www.googleoptimize.com https://www.googletagmanager.com js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hsleadflows.net js.monitor.azure.com js.usemessages.com maps.googleapis.com player.quadia.net r.bing.com snap.licdn.com static.cloud.coveo.com surfly.com t.contentsquare.net tags.nmrc.nl www.dwin1.com www.google-analytics.com www.googleadservices.com www.youtube.com www.zenaps.com www.awin1.com https://api-engage-eu.sitecorecloud.io https://d35vb5cccm4xzp.cloudfront.net https: