aviodrome.nl

HTML metadata

Title

Kijk omhoog, ontdek meer | Luchtvaartmuseum Aviodrome

Description

Welkom aan boord! Ben je klaar voor een duikvlucht langs meer dan 100 unieke vlieguigen in het allerleukste vliegtuigmuseum in Lelystad? Ready for boarding?

Language

nl

Canonical

https://www.aviodrome.nl

Translations

en
nl

Open Graph

url: https://www.aviodrome.nl
title: Kijk omhoog, ontdek meer | Luchtvaartmuseum Aviodrome
site name: Aviodrome
description: Welkom aan boord! Ben je klaar voor een duikvlucht langs meer dan 100 unieke vlieguigen in het allerleukste vliegtuigmuseum in Lelystad? Ready for boarding?

Technology

CDN: Vercel
CMS: Next.js

Social widgets

YouTube Embed

Third-party hosts loaded (3)

cdn.libemaweb.com×10
a.storyblok.com×2
www.youtube.com×1

Social

Registration

Registrar

Hostnet B.V.

Created

2002-04-16

Updated

2024-06-07

Name servers

ns01.hostnet.nl
ns02.hostnet.nl

DNS records live

NS

ns01.hostnet.nl
ns02.hostnet.nl

MX

10 d326055.a.ess.de.barracudanetworks.com
20 d326055.b.ess.de.barracudanetworks.com

TXT

Show 4 TXT records

vqCkwvUTmRlk5kgkcypSD/BPW/ubEhbhOjLMm/UMyUOpzoIAHsfgw6knM71QNhIisuCJtGHyoMEWRw2Vro4Hqw==
v=DMARC1 include:_dmarc.aviodrome.nl ~all
spycloud-domain-verification=f8fba36e-2f4d-4031-801f-57016e59db4b
wombat-verification=3KwxVCQV1HEp-aRXRTKKaZ5G0frhk

Verified for

Apple
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a mx a:aviodrome.nl ip4:185.53.162.69 ip4:193.172.164.66 include:spf.ess.de.barracudanetworks.com include:spf.flowmailer.net include:spf.protection.outlook.com include:amazonses.com ip4:212.72.62.129 -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc@inbound.flowmailer.net,mailto:rua+aviodrome.nl@dmarc.barracudanetworks.com; ruf=mailto:dmarc@inbound.flowmailer.net,mailto:ruf+aviodrome.nl@dmarc.barracudanetworks.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtauQeJvdkXvRt5RX8lzWdMe+BloeYoYMwfsLEZgwg41Itnq6Q9BOhfQfzHpa53SCJm8bpIlLO802oQ…

selectors probed

Certificate (current)

R12

from 2026-05-02 to 2026-07-31

Expires in 58 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.aviodrome.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' * use.typekit.net; style-src 'self' 'unsafe-inline' *.typekit.net *.posthog.com *.staging-enviso.io *.enviso.io *.adyen.com use.typekit.net; frame-ancestors 'self' *.storyblok.com; frame-src 'self' *.adyen.com *.matterport.com *.insocial.eu *.youtube.com *.google.com *.cookiebot.com *.cookiebot.eu *.doubleclick.net *.googletagmanager.com *.facebook.com *.snapchat.com *.linkedin.com; img-src * blob: data:; media-src 'self' *.youtube.com youtube.com *.storyblok.com cloudinary.com *.cloudinary.com; connect-src *; font-src 'self' *.staging-enviso.io *.enviso.io *.typekit.net
strict-transport-security: max-age=31536000; includeSubDomains; preload