indexo.dev

deltaportdonatiefonds.nl

.nl crawl

First seen 2026-05-18 · Last seen 2026-05-31 · ok HTTP/1.1 200 17589 ms crawled 2026-05-22

NL · 13.81.200.66 · AS8075 Microsoft Corporation

Reputation 100/100

sector other type homepage

HTML metadata

Title
Deltaport - Homepage
Canonical
https://www.deltaportdonatiefonds.nl/homepage

Open Graph

url
https://www.deltaportdonatiefonds.nl/homepage

Technology

Server
ws
jQuery
3.5.0
Stack
ASP.NET

Third-party hosts loaded (1)

  • code.jquery.com×1

Social

Contact

Email

DNS records live

NS
  • auth01-peer.ib.routit.net
  • auth02-peer.ib.routit.net
MX
  • 0 deltaportdonatiefonds-nl.mail.protection.outlook.com
TXT
  • tAY6cBA+NlUDI+FiR6x7se3esETi/ne4sArJil2pynWf6152mQEqcFSc7Bhr4oWvrrSWybgSBMOF/PUOpkXl/w==
Verified for
  • Microsoft 365

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi7QEx0NeWo7n9gvnNaUxQRZiASkaXgzyu6KRJ/atjT6Y4i0TYNkzL0amiS+1Zb9pGW5kvjzCjI9hi…
selectors probed

Certificate (current)

Trust Provider B.V. TLS RSA CA G1
from 2025-07-07 to 2026-07-28
Expires in 57 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://deltaportdonatiefonds.nl/homepage

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(self), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(self), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=(), hid=(), idle-detection=(), serial=(), window-placement=(self)
x-content-type-options
nosniff
content-security-policy
default-src 'self'; object-src 'self' *.youtube.com *.vimeo.com *.google.com *.googleapis.com; img-src 'self' *.s3.eu-west-1.amazonaws.com blob: data: *.googleapis.com *.gstatic.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.google.com *.google.nl *.g.doubleclick.net *.deltalinqs.livits.net *.livits.net *.deltalinqs.nl *.sharethis.com; style-src 'self' 'unsafe-inline' cdn.livits.net *.fontawesome.com *.googleapis.com *.ogone.com *.myfonts.net *.gstatic.com *.myfonts.net; connect-src 'self' *.google-analytics.com *.googletagmanager.com *.analytics.google.com *.google.com *.google.nl *.g.doubleclick.net *.googleapis.com *.sharethis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.livits.net *.googleapis.com *.google.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.ogone.com *.twitter.com *.jquery.com *.sharethis.com *.facebook.net; frame-src 'self' *.google.com *.twitter.com *.publitas.com *.soundcloud.com; frame-ancestors 'self' *.off
strict-transport-security
max-age=31536000;includeSubDomains

Links to (2)

Linked from (2)