ervaarmaassluis.nl

.nl crawl

First seen 2026-06-01 · Last seen 2026-06-03 · ok HTTP/1.1 200 1415 ms crawled 2026-06-02

IE · 79.125.126.131 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

Ontdek Maassluis | Ervaar Maassluis

Description

De eerste stad aan de Waterweg én de Sleepboothavenstad van Nederland. Ontdek de maritieme historie van Maassluis dankzij de talloze (zee)sleepboten, de haven, de prachtige monumentale panden en het historische Stadshart.

Language

Translations

Open Graph

title: Ontdek Maassluis
site name: Ervaar Maassluis

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (2)

assets.plaece.nl×45
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.argewebhosting.eu
ns2.argewebhosting.com
ns3.argewebhosting.nl

MX

10 ervaarmaassluis-nl.mail.protection.outlook.com

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 include:_spf.createsend.com include:_spf.yourfilter.nl include:spf.protection.outlook.com include:relay.insiders.nl ~all

softfail (~all)

DMARC

v=DMARC1; p=none; sp=none;

policy: none (monitoring only) · sp=none

DKIM

default: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK0F0jz8czWUga4HOqFtiQgLvBFSdh8o9JIiwlI1DRqsH7TkLIhklkcCbtoirZVAAIlW5ws4LBgzUzoCe/xGw…

selectors probed

Certificate (current)

R13

from 2026-05-02 to 2026-07-31

Expires in 57 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.ervaarmaassluis.nl/nl

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=*, autoplay=*, accelerometer=(), camera=(), microphone=(), usb=(), gyroscope=(), magnetometer=()
x-content-type-options: nosniff
content-security-policy: default-src https: 'unsafe-inline' 'unsafe-eval' data: blob:; block-all-mixed-content; connect-src * blob:; font-src https:; frame-ancestors 'self' https://preview.plaece.nl; frame-src *; img-src https: data: blob:; media-src https: data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; report-uri /nelmio/csp/report; worker-src https: blob:
strict-transport-security: max-age=315360000