downtown.nl

.nl crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 742 ms crawled 2026-05-30

US · 104.21.43.249 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: De beste skate en snowboard shop | Downtown
Description: Alles wat jij nodig hebt voor het skaten of snowboarden. Van materiaal tot kleding vind je bij Downtown. Sinds 1985 zijn wij dé specialist op gebied van skaten en snowboarden.
Language: nl
Canonical: https://downtown.nl/

Technology

CDN: Cloudflare
CMS: Gatsby
Stack: PHP

Analytics

Google Tag Manager

Third-party hosts loaded (2)

static.klaviyo.com×1
www.googletagmanager.com×1

Social

Contact

Phone

866627042

DNS records live

NS

paloma.ns.cloudflare.com
remy.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt1.aspmx.l.google.com
10 alt2.aspmx.l.google.com
20 aspmx3.googlemail.com
5 aspmx2.googlemail.com

TXT

klaviyo-site-verification=VKL6Jn

Verified for

Google

Email authentication partial

SPF

v=spf1 ip4:116.202.254.196 include:_spf.google.com include:amazonses.com include:spf.downtown073.hypernode.io ~all

softfail (~all)

DMARC

v=DMARC1;p=none;

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-05-14 to 2026-08-12

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://downtown.nl/

present

content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy-report-only: font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.feedbackcompany.com *.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com *.webwinkelkeur.nl *.tawk.to *.crisp.chat data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.feedbackcompany.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardina