bronckhorst.nl

HTML metadata

Title: Home | Gemeente Bronckhorst
Language: nl
Generator: SIMsite powered by Drupal
Canonical: https://www.bronckhorst.nl/

Open Graph

url: https://www.bronckhorst.nl/
title: Home
locale: nl
site name: Gemeente Bronckhorst
updated time: 2026-04-13T09:14:30+02:00

Technology

CMS: Drupal
JS framework: Next.js

Third-party hosts loaded (3)

cuatro.sim-cdn.nl×72
bronckhorst.logging.simanalytics.nl×1
fonts.bunny.net×1

Social

Contact

Phone

(0575) 75 02 50

DNS records live

NS

ns0.transip.net
ns1.transip.nl
ns2.transip.eu

MX

0 bronckhorst-nl.x-v1.mx.microsoft

TXT

Show 28 TXT records

9p4g4x5wm8mkqlqlbbck4hsf01brnv9b
bastion365-domain-validation=db7229829c646
jr88dwx1xf9dn993lxb8b0dljv8qnc09
bw=RMwjvLtoQt1EGwBmH9uhM7iEHZUcLUGw0afG6C4fBX96
DUct4e0gyMuc9k0qTYd9TIL0CT5JHlY2hTTxB6DgDvwFC5cBxswKs80gPfdKz9hP
lyckjd90lv43kxhsty0fckdtjz5bnx0q
567decf7469cf34fd5385f903c9deac602528f7f91569addb04693c591040b1b
862hzKGOGmkWK3FUmi2UHKcVidOIvwnrKdj5iFC7Akvo2NwtPC0Y3FcpiO17g6gr
5nkBgjY98L0jxWSSgsJGo2F00GWgshUMPvWFtUboJcAPgCYIwH4DLgKe5iSIATUX
nkjmWidw7PJ6YxPFiDr5OopoWLUQM348bwYJvHQdmrPJVnkKGU18a1Uk7edKlgEh
7t59gm7464twv3rmmqkzn8t9qdby5ybs
b1e19b6e02b7d90c4268db71131be0f027f0bb1bea77cebb94186b8f421c8e15
v=NTA7516-1;startdate=2019-06;enddate=2029-09;provider=bastionic;ntamx=10 mx.bastion365.net
Qmak0G8aYxrjcilOJEfvABzwQbhK7n6myDxJf9rVHBOlP4psXwzuiNuIxs6g5bvx
qaeEntYtMmTJhQxGwa3y6nCV89Efb36X5xOoKeApDOGxELpCFc4PQxkxiSSzv5sR
sXm0yXuWtMSPuwCFWBeRpUIrspCCLLX0Ds1n0mbSkBakopQwqc0wZpbUnYLkJr78
fxssz0n94034v2kv70z29k4d33cnqbdj
j37byspjmt6f2tzmy04vrchzls5vw90k
Yk3C4Be5YrbNt3xciCFLyyGJoOyaCh3DuipmFhT3h3QkYeWGnuALv4kn0ANFSgGs
DomainVerification=CB93GOSLCP7L3EEMKOFUPOZNZQFMKNCFVRY7WN8XPEOUZ25BSOSNKL29V7873KAH
k3WVBYzFAGPu9LPrzo54FUkzDqEeO3LXfuUcXk1ivCeKKpiYhzXddVYXsBaq2lDP
MfrET8xAluS536woJTf7oRp7PDQYJ2Gv4pLljyJrrmvtbV2bRoRNLpvCSiCD0f7p
_6cedpenimz9idfqkse8ao4p3u9i3nz7
aHYlZg84fl34w6S2ikrJumynFByEoWB9UTDT0qB64GJoA0a5tJOlSCtPjx2odIba
OEPaHUG10u4F8rIQm7wEpBc7Yj0Ndi7I5vQLUSj0QSGfXe4g9slgGKqNXYXUdMIe
llzxpyjqfybvj4xhwpftks1y9kgm5625
74S39VjRiVHG4N2aujiscvnOq2pm7sQK340qCTathI465wOf5uP30Smx5ioeoaCk
7eb3e5e1126318e527a79f034d0c6ccc351e4158f95e7ce273dbdc7d14b4d309

Verified for

GlobalSign
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com a:outbound.doetinchem.nl include:spf.simgroephosting.nl ip4:45.80.232.20/30 ip4:85.90.85.193 ip4:85.90.85.177 ip4:45.80.232.21 include:_spf.mail.services.bastion365.net ip4:78.108.130.89 ip4:78.108.130.88 include:spf.topdesk.net include:spf.eprov.nl ip4:89.105.212.234 ip4:89.105.212.162 ip4:37.97.128.67 ip4:194.53.14.66 ip4:194.13.163.7 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rf=afrf; rua=mailto:dmarc-rua@bronckhorst.nl,mailto:rapportages@dmarc.ibdgemeenten.nl

policy: quarantine

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa6szO+EZ1OzCBMKZuJDW66t3EBGhV5HCRj3I8pY/lpGE+5mqyfv1tAVthwc1BbnsiZ/fh9m/RnVU/…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRnpfBqT4houMY+J1HezyK4TXW9ifw78yKfOuflNyULX61jWrE8b6mjGUQLlkdA6mOnmfjJGzBqpvs…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsyNXSQB98L2itAP6Ku9JHGNJtxGeSTfEkMAZSAvJVc9iZL2/hvLhgDoxqugEHn2ckDyCCyMSdkernUous…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IIcqnPAq92kwELOA4rVfSTUM5hoNHr1XZLGr1nfwvh++jGBok3TCfDdzCWcMfq/BifT7MGlizis1fcloA…

selectors probed

Certificate (current)

Thawte TLS RSA CA G1

from 2025-10-06 to 2026-10-06

Expires in 124 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.bronckhorst.nl/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: same-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; img-src * data: 'unsafe-inline' blob:; style-src * 'unsafe-inline' blob:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src *; form-action *; media-src *.readspeaker.com *.streamlock.net *.archieven.nl storage.googleapis.com scribit-pro-hosting.storage.googleapis.com scribit-pro.storage.googleapis.com app.talkjs.com *.bbvms.com *.cloudfront.net data: 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:;
strict-transport-security: max-age=31536000
content-security-policy-report-only: default-src 'self'; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://fonts.googleapis.com; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-ZTk4YTVjNjYtMGM4ZC00ZTA0LTlkYzItYjRiZWEwMmQzMjYx' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report