female.nl

.nl crawl

First seen 2026-05-11 · Last seen 2026-05-16 · ok HTTP/1.1 200 4677 ms crawled 2026-05-17

DE · 49.13.115.182 · AS24940 Hetzner Online GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

Female.nl - Beauty, Skincare & Lifestyle

Description

Dé online bestemming voor beauty, skincare, lifestyle en meer. Ontdek de nieuwste trends, tips en inspiratie.

Language

Canonical

https://female.nl/

Translations

Open Graph

title: Female.nl - Beauty, Skincare & Lifestyle
locale: nl_NL
site name: Female.nl
description: Dé online bestemming voor beauty, skincare, lifestyle en meer. Ontdek de nieuwste trends, tips en inspiratie.

Technology

Server: nginx

Social

Registration

Registrar

ZXCS

Created

1997-09-21

Updated

2026-02-19

Name servers

helium.ns.hetzner.de
oxygen.ns.hetzner.com
hydrogen.ns.hetzner.com

DNS records live

NS

helium.ns.hetzner.de
hydrogen.ns.hetzner.com
oxygen.ns.hetzner.com

MX

10 mail.female.nl.female.nl

Email authentication partial

SPF

v=spf1 ip4:49.13.115.182 a mx ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:hoi@female.nl; sp=none; aspf=r

policy: none (monitoring only) · sp=none

DKIM

mail: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9UST4ZHD+TwyQfipaYE/Ikrr4VmccvChlopEROTvbDtBW4iJHyZEKsskhLM84YS1Kq1…

selectors probed

Certificate (current)

from 2026-04-20 to 2026-07-19

Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://female.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' https: 'unsafe-inline' js.stripe.com; style-src 'self' https: 'unsafe-inline'; frame-src 'self' js.stripe.com https://www.youtube.com https://www.youtube-nocookie.com; connect-src 'self' https: api.stripe.com
strict-transport-security: max-age=63072000; includeSubDomains, max-age=63072000; includeSubDomains