bezoek-ede.nl

HTML metadata

Title

Actief genieten op de Veluwe | Bezoek Ede | Bezoek Ede

Description

Wandelen, fietsen of genieten in het bekendste natuurgebied van Nederland? Beleef de natuur, cultuur en historie van Ede en de Veluwe. Ontdek alle tips.

Language

nl

Translations

de
nl

Open Graph

url: /
title: Actief genieten op de Veluwe in Nederland
site name: Bezoek Ede
description: Wandelen, fietsen of genieten in het bekendste natuurgebied van Nederland? Beleef de natuur, cultuur en historie van Ede en de Veluwe. Ontdek alle tips.

Technology

jQuery: 2.1.4 known XSS (<3.5)

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (5)

assets.plaece.nl×47
cdnjs.cloudflare.com×1
use.typekit.net×1
www.besuch-ede.de×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

DNS records live

NS

ns1.dn-s.nl
ns2.dn-s.be
ns3.dn-s.eu
ns4.dn-s.org

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google

Email authentication partial

SPF

v=spf1 include:_spf.premiumantispam.nl include:_spf.google.com include:relay.insiders.nl include:mandrillapp.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; sp=none;

policy: none (monitoring only) · sp=none

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWSc23BQ3I7e/J5moyCWTzvzJI8XRPX+TbmW7b/GO2BsbYtEHUgyb2hSgefx7ip/z6L8WS/E9vU1xy…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscQ1dgwUV7rMwpRG+cQSFkSXLa104s4DvLrDZyAVAmOB960CSXiLzL4R6QS2MkgxCn2sgq+aX97DKBoqye…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQ/gSkxjVcck21rcy3fuRsOrlIFY4kLr1Jf9S+cAxP9WpkQjqtltko08xR+ve9ouzo5AnlgyTz8OyzheeF38oLWd…

selectors probed

Certificate (current)

R12

from 2026-05-21 to 2026-08-19

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.bezoek-ede.nl/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=*, autoplay=*, accelerometer=(), camera=(), microphone=(), usb=(), gyroscope=(), magnetometer=()
x-content-type-options: nosniff
content-security-policy: default-src https: 'unsafe-inline' 'unsafe-eval' data: blob:; block-all-mixed-content; connect-src * blob:; font-src https:; frame-ancestors 'self' https://preview.plaece.nl; frame-src *; img-src https: data: blob:; media-src https: data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; report-uri /nelmio/csp/report; worker-src https: blob:
strict-transport-security: max-age=315360000