festivalcement.nl

HTML metadata

Title: Festival Cement
Description: Elk jaar in maart trakteert Festival Cement op een bombardement van spannende voorstellingen. Op allerlei plekken in ’s-Hertogenbosch richten publiek en profs de blik op een nieuwe generatie podiumkunstenaars.
Language: nl
Canonical: https://festivalcement.nl

Open Graph

title: Festival Cement
locale: nl
site name: Festival Cement
description: Elk jaar in maart trakteert Festival Cement op een bombardement van spannende voorstellingen. Op allerlei plekken in ’s-Hertogenbosch richten publiek en profs de blik op een nieuwe generatie podiumkunstenaars.

Technology

Social widgets

YouTube Embed

Third-party hosts loaded (1)

www.youtube.com×2

Social

DNS records live

NS

ns-cloud-b1.googledomains.com
ns-cloud-b2.googledomains.com
ns-cloud-b3.googledomains.com
ns-cloud-b4.googledomains.com

MX

Show 6 MX records

1 aspmx.l.google.com
10 aspmx3.googlemail.com
10 aspmx4.googlemail.com
10 aspmx5.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Email authentication partial

SPF

v=spf1 a:mailer1.activetickets.com mx ptr include:_spf.cre8ion.nl ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc@festivalcement.nl;

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R13

from 2026-05-27 to 2026-08-25

Expires in 82 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.festivalcement.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: unsafe-url
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=()
x-content-type-options: nosniff
content-security-policy: block-all-mixed-content; base-uri 'self'; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* *.google.com *.gstatic.com www.google-analytics.com *.addtoany.com use.fontawesome.com *.youtube.com *.ytimg.com *.googleapis.com googleapis.com *.googletagmanager.com *.cloudflare.com chimpstatic.com *.chimpstatic.com; style-src 'self' 'unsafe-inline' *.googleapis.com googleapis.com *.google.com *.addtoany.com cloud.typography.com *.myfonts.net *.typekit.net *.cloudflare.com *.gstatic.com; font-src 'self' *.gstatic.com data: *.typekit.net *.cloudflare.com festcement.v3.webshop.activetickets.com; img-src 'self' data: *.google-analytics.com *.analytics-google.com *.gstatic.com *.googleapis.com googleapis.com *.google.com *.cloudflare.com theateraandeparade.tc8l.dev; child-src 'self' *.google.com *.addtoany.com *.youtube.com *.vimeo.com vimeo.com *.activetickets.com *.issuu.com *.recruitee.com *.linkedin.com *.youtube.com *.soundcloud.com *.vimeo.com *.facebook.com *.
strict-transport-security: max-age=31536000