derondevenen.nl

HTML metadata

Title: Wonen en leven - Gemeente De Ronde Venen
Language: nl

Open Graph

url: https://www.derondevenen.nl/Wonen_en_leven
title: Wonen en leven

Technology

jQuery: 3.7.1
Stack: Java

Third-party hosts loaded (3)

purl.org×2
cdn-eu.readspeaker.com×1
standaarden.overheid.nl×1

Social

Contact

Phone

31297291616

DNS records live

NS

ns1.kpn.net
ns11.kpn.net

MX

0 derondevenen-nl.v-v1.mx.microsoft

TXT

Show 17 TXT records

2moqQiwnxjsAxc00985wkmA4A2g3Ok78SLlhRONj2jVrjeRSMy0RCqkBmEsFCCuq
v2Ztp9jXfUF9utgLNTNW468trXVpAYvhnTkzSwNQtrR2hKne6h9zttIXYVSZ8OeB
MS=A6059E4A29CC0BEA195FCEA021077503AED270FF
aa7900ef137784b90846cffed65b25b43f17be03bc3cf2eb75693a30715ec7db
cORfoN8AVoRLjTxkEaUOTBFryQ4IUulY00OBiB7MrxSwoHsTiAtGsncKFUXjisz6
8bzLXg80SW8qckF7yXYp8mp51BOFrivjLAEYSKQyLfJTPGhKgNFaN2P8LoqpyCsE
wvMZ11Q5qhfMu1UGDJsy0KfiaM0a2punDv551mJx9nEJuIezpWDG8zKGiVa3plr5
c5be502298d2fa2662e6da5109b4950da9e1b2189c42fd613dba8b93cf7ef1d9
DomainVerification=9DRFKCNZPC9ZXBMSWSZBA804AU2H0B8ZV62FNRK86XU4UKZXF2RD9ZTVOI773MKN
5896a26b-c895-4375-944a-ad2c2a723b52
MJTanCoIoHSL0RY7U4Mdfa9TP9Oge7Tgfwo92rPBiFkJBvg79W7yOxlBRHqBJiXD
FI92uvb0XuZ34ltAzaO9XcEkgIANW0U2omhFcWZb8FS6SxfKF9O7zivVrINqF7al
5LgfQKnCLYABsh6X8gtVpRPbMm5TLHcHccRV62NDMwAlSkuV4noFDLzQ9j0CsAkY
qe52SlYXBX0peXEQsNsfqjKUuUFJoPpAxlLTKaL5wqkQrkExRBJDkpmU0JJiboya
autodesk-domain-verification=UOcxm6rxRzPTN3mkt0y9
U3MpyghACXk7q8CqKkif95T91922oBZIU6lvtHIR0WbhLEtTSkgDyuhU0NrWQhix
49ab39931b63b819820df8e7e3023cc35181cd1765165a1a4241bcd5a76f3898

Verified for

Apple
Microsoft 365

Email authentication strong

SPF

v=spf1 a:relay.smartlockr.eu include:spf.protection.outlook.com include:spf.eprov.nl include:spf.pinkprivate.cloud include:spf.topdesk.net include:amazonses.com include:_spf.ubeeo.nl -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; rua=mailto:xz7uz2o3@ag.eu.dmarcadvisor.com,mailto:rapportages@dmarc.ibdgemeenten.nl

policy: reject (enforced) · sp=reject

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCz+tAUnBeXeEWg07Jxfjvg7I+S3go5k2uiO/A+K1+2xH1du5a9pElAVtWRL8t0B74cr4piwDvDDsH+Y94cnT…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlgNtngrJCm64FNfsrp5jmHHVPxNIgMftmMabzCVkyDc3ppQ5z+YNDyfxQO/eJdmMRLXryxxEMpXDvhHWW0c…
k1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBS96F0nzm6hFo8mRnB31d6B4hpODHZEioRG27Cy5W0PD8tw0JtltYdZ1Q1w+n6TcLZvtITaAnM1k70s9t/o…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-10-30 to 2026-10-31

Expires in 152 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://derondevenen.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN"
x-content-type-options: nosniff"
content-security-policy: default-src 'self' data: blob:; base-uri 'self'; img-src * data: https://app.tolkie.nl https://cdn.tolkie.nl; frame-src 'self' https://kaartapi.nl https://www.kaartapi.nl https://websurveys2.govmetric.com https://app-eu.readspeaker.com https://www.youtube-nocookie.com https://www.youtube.com https://content.googleapis.com/ https://vars.hotjar.com https://app.tolkie.nl/ https://player.vimeo.com https://geodata.derondevenen.nl https://geodata-acc.derondevenen.nl; frame-ancestors 'self'; manifest-src 'self'; media-src 'self' blob: *.readspeaker.com *.speechstream.net; script-src 'self' 'nonce-ZTJmN2FlOWYtY2YxZS00MjAyLTk1NTYtZjkxZjQyNzk3N2Uw' https://stats.pusher.com https://www.browsealoud.com https://www.googletagmanager.com https://www.google-analytics.com https://apis.google.com https://maps.googleapis.com https://siteimproveanalytics.com https://cloudstatic.obi4wan.com https://websurveys2.govmetric.com https://platform.hireserve.nl https://websurveys2.servmetric.com https://cdn1.reads
strict-transport-security: max-age=31536000; includeSubDomains; preload"