indexo.dev

fysioworkshop.nl

.nl crawl

First seen 2026-06-02 · Last seen 2026-06-03 · ok HTTP/1.1 200 905 ms crawled 2026-06-03

NL · 89.31.58.93 · AS201401 NewVM B.V.

Reputation 92/100 weak subdomain policy

Classifying

HTML metadata

Title
FysioWorkshop Houten – HOUTEN
Language
nl-NL
Canonical
https://www.fysioworkshop.nl/

Technology

CMS
WordPress
jQuery
3.7.1

Social

Contact

Email
Phone

DNS records live

NS
  • ns1.pharmeon.nl
  • ns2.pharmeon.nl
MX
  • 10 fysioworkshop-nl.mail.protection.outlook.com
Verified for
  • Microsoft 365

Email authentication strong

SPF
v=spf1 mx a include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; sp=none; rua=mailto:dmarc@fysioworkshop.onmicrosoft.com; ruf=mailto:dmarc@fysioworkshop.onmicrosoft.com; fo=1;
policy: reject (enforced) · sp=none
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDtMhuNQ62fMjw9CklIZ8+zsU9pJ8hdv98OU97bvAevGpOoJ3NRJV1tTrMBx1dx3vmj9TjK61nTSi7BQyTUdC…
selectors probed

Certificate (current)

Trust Provider B.V. TLS RSA CA G1
from 2026-04-02 to 2026-10-18
Expires in 135 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.fysioworkshop.nl/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak content type protection
Header values
referrer-policy
strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options
DENY
permissions-policy
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options
nosniff, nosniff
content-security-policy
default-src 'self' *.zorgscore.nl fonts.gstatic.com data: ; script-src 'self' 'nonce-f98c148afb' 'unsafe-eval' feedbackcompany.com www.hierhebikpijn.nl content.moetiknaardedokter.nl *.spreekuur.nl translate.google.com *.twimg.com *.twitter.com *.zorgscore.nl *.facebook.net *.facebook.com www.googletagmanager.com *.googleapis.com www.google-analytics.com www.google.com api.doctena.nl *.intramedonline.nl *.zorgkaartnederland.nl *.pharmeon.nl *.azurewebsites.net *.uwzorgonline.nl www.gstatic.com cdn.jsdelivr.net ; style-src 'self' 'unsafe-inline' data: www.googletagmanager.com feedbackcompany.com www.gstatic.com translate.googleapis.com content.moetiknaardedokter.nl *.zorgscore.nl *.twitter.com *.facebook.net *.facebook.com fonts.googleapis.com use.fontawesome.com *.zorgkaartnederland.nl ; base-uri 'self'; object-src 'none'; connect-src 'self' *.google.com feedbackcompany.com api.moetiknaardedokter.nl content.moetiknaardedokter.nl minddapim.azure-api.net *.googlesyndication.com *.googleap
strict-transport-security
max-age=31536000

Links to (6)

Linked from (2)