boomfeestdag.nl

HTML metadata

Title: Home Page | Boomfeestdag
Description: Laat elk kind een boom planten! Stichting Nationale Boomfeestdag zorgt dat ieder basisschoolkind minstens één boom plant. Doe mee en steun ons!
Language: nl-NL
Generator: SEOmatic
Canonical: https://www.boomfeestdag.nl/

Open Graph

url: https://www.boomfeestdag.nl/
title: Home Page
locale: nl_NL
site name: Boomfeestdag
description: Laat elk kind een boom planten! Stichting Nationale Boomfeestdag zorgt dat ieder basisschoolkind minstens één boom plant. Doe mee en steun ons!

Technology

Server: nginx

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×2
fonts.gstatic.com×1
www.googletagmanager.com×1

Social

Contact

Email

info@boomfeestdag.nl

Phone

0137074850

Registration

Registrar

Internationale Domeinregistratie Nederland

Created

1998-12-03

Updated

2025-07-07

Name servers

ns0.nl
ns11.net
ns5.be

DNS records live

NS

ns0.nl
ns11.net
ns5.be

MX

0 boomfeestdag-nl.c-v1.mx.microsoft

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.mandrillapp.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; adkim=s; aspf=s; rua=mailto:postmaster@boomfeestdag.nl

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs639BC6X/jIyvECyOzfaxEF15llizrnjV4mkm+eijhmpX9Wfy4DfandTStM3bPJfCOr73sUmuTrcbd…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

E7

from 2026-05-07 to 2026-08-05

Expires in 66 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.boomfeestdag.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src *; font-src * data:;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; frame-ancestors www.boerenboomfeestdag.nl www.boomfeestdag.nl www.geboortebos.nl www.levensbomenbos.nl; frame-src *
strict-transport-security: max-age=63072000; includeSubdomains; preload