behaagjetuin.be

.be crawl

First seen 2026-06-01 · Last seen 2026-06-03 · ok HTTP/1.1 200 1016 ms crawled 2026-06-02

BE · 85.158.210.41 · AS8368 Dstny BE N.V.

Reputation 94/100 dmarc partial coverage

Classifying

HTML metadata

Title: Doe mee aan de groepsaankoop "Behaag je tuin"
Description: Behaagjetuin
Language: nl
Canonical: https://www.behaagjetuin.be

Open Graph

url: https://www.behaagjetuin.be
title: Doe mee aan de groepsaankoop
site name: Behaagjetuin
description: Behaagjetuin

Technology

Server: Behaagjetuin
jQuery: 3.7.1

Analytics

Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (3)

trustseals.trust-guard.com×3
www.googletagmanager.com×2
www.youtube-nocookie.com×1

DNS records live

NS

ns1.jaan.be
ns2.jaan.be

MX

10 spamwall.www4.be
20 backupmx.www4.be

Verified for

Google

Email authentication strong

SPF

v=spf1 a mx include:_spf.jaan.be -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;sp=quarantine;pct=0;ri=0;

policy: quarantine · pct=0 · sp=quarantine

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrsnJvXjCNpN1niIUbnv/dhNohzSdZ6jEPLP7V5Wm4ZBvr73Gy4Nll8nEEVKE38ZoCs591oGmfP50…

selectors probed

Certificate (current)

R13

from 2026-05-05 to 2026-08-03

Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.behaagjetuin.be/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: strict-origin-when-cross-origin, same-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' blob: data:; worker-src 'self' https://*.google.com https://*.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com https://connect.facebook.net https://npmcdn.com https://www.googletagmanager.com https://trustseals.trust-guard.com https://*.gstatic.com https://*.google.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://npmcdn.com https://npmcdn.com https://maps.googleapis.com https://cdn.ckeditor.com; img-src * 'self' blob: data:; font-src 'self' https://cdn.jsdelivr.net https://fonts.gstatic.com https://fonts.bunny.net data:; frame-src 'self' https://www.youtube-nocookie.com https://www.google.com https://maps.google.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://trustseals.trust-guard.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://fonts.bunny.net; report-uri https://core.jaan.be/csp/; connect-src 'self' https://*.google-analytics.com https
strict-transport-security: max-age=63072000; includeSubdomains; preload