indexo.dev

bvvb.nl

.nl crawl

First seen 2026-05-29 · Last seen 2026-05-29 · ok HTTP/1.1 200 605 ms crawled 2026-05-31

NL · 2.58.165.25 · AS207843 vBoxx B.V.

Reputation 84/100 permissive spf dmarc monitor-only

Classifying

HTML metadata

Title
Branchevereniging VvE-beheerders | Betrouwbaar voor VvE’s | BVVB - Branchevereniging VvE Beheerders (BVVB)
Description
BVVB is dé branchevereniging voor VvE-beheerders die het verschil maken en VvE’s die betrouwbaarheid zoeken. ✔️ BVVB Keurmerk
Language
nl

Open Graph

title
Branchevereniging VvE-beheerders | Betrouwbaar voor VvE’s | BVVB - Branchevereniging VvE Beheerders (BVVB)
site name
Branchevereniging VvE Beheerders (BVVB)

Technology

Server
nginx
Analytics
  • Google Tag Manager
Fonts
  • Adobe Fonts

Third-party hosts loaded (3)

  • static.genkgo.com×1
  • use.typekit.net×1
  • www.googletagmanager.com×1

Social

Contact

Email
Phone

DNS records live

NS
  • ns1.genkgo.net
  • ns2.genkgo.net
  • ns3.genkgo.net
MX
Show 6 MX records
  • 0 bvvb-nl.mail.protection.outlook.com
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • ge-verification=f07f06cafa8725af
Verified for
  • Microsoft 365

Email authentication weak

SPF
v=spf1 mx a ip4:185.56.146.240 include:spf.genkgo.net include:_spf.google.com include:spf.protection.outlook.com-all
permissive (+all) — anyone can send as this domain
DMARC
v=DMARC1; p=none; sp=none
policy: none (monitoring only) · sp=none
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-05-10 to 2026-08-08
Expires in 69 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://bvvb.nl/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
strict-origin
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
default-src 'self'; child-src 'self' *.youtube.com *.spotify.com https://static.genkgo.com https://bvvb.genkgo.app; connect-src 'self' https://static.genkgo.com https://bvvb.genkgo.app; font-src 'self' https://static.genkgo.com https://bvvb.genkgo.app 'unsafe-inline'; img-src 'self' https://* https://static.genkgo.com https://bvvb.genkgo.app data:; media-src 'self' *.google-analytics.com bvvb.genkgo.app https://static.genkgo.com https://bvvb.genkgo.app; script-src 'self' *.googletagmanager.com https://static.genkgo.com https://bvvb.genkgo.app 'unsafe-inline'; style-src 'self' https://static.genkgo.com https://bvvb.genkgo.app 'unsafe-inline'; report-uri https://bvvb.nl/f/error-report/report/csp; upgrade-insecure-requests
strict-transport-security
max-age=31536000; preload

Links to (14)

Linked from (1)