geldenrechtutrecht.nl — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Home | Geld en Recht
Language: nl
Canonical: https://www.geldenrechtutrecht.nl/

Open Graph

title: Home | Geld en Recht

Technology

Server: nginx
CMS: Next.js

Third-party hosts loaded (1)

policy.app.cookieinformation.com×1

Contact

Phone

+31302361766

Address

Drift 11, 3512 BR, Utrecht, Utrecht, NL

DNS records live

NS

ns0.transip.net
ns1.transip.nl
ns2.transip.eu

MX

0 geldenrechtutrecht-nl.mail.protection.outlook.com

Verified for

Brevo
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.exonet.nl -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarcmeldingen@u365.nl

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHba6TrZPgVpfIkQdOQ+09YHIznXbvRZtJhY1bIjsbonVUYXWN+FHA9MiahGDRdJeCjOVgCwrkcXqf…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ9Yjr5wK61EHGN4p8PVykMd/Faevsgkx9dzOuZotg5DnX3Q/7Nm06qbWrWGtRYSmNdgT20FSEqAHo…

selectors probed

Certificate (current)

R12

from 2026-05-24 to 2026-08-22

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.geldenrechtutrecht.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: ALLOW-FROM https://backend.stichting-pk.nl
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), fullscreen=(self), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), usb=(), web-share=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://policy.app.cookieinformation.com https://stichting-pk.piwik.pro https://stichting-pk.containers.piwik.pro https://www.youtube.com https://www.youtube-nocookie.com https://*.google.com https://cdn.userway.org https://www.gstatic.com https://*.algolia.net https://*.algolianet.com; style-src 'self' 'unsafe-inline' https://cdn.userway.org https://fonts.googleapis.com https://fonts.gstatic.com; img-src 'self' blob: data: https://maps.googleapis.com https://maps.gstatic.com https://img.youtube.com https://i.ytimg.com https://cdn.userway.org; font-src 'self' https://cdn.userway.org https://fonts.googleapis.com https://fonts.gstatic.com; connect-src 'self' https://maps.googleapis.com https://policy.app.cookieinformation.com https://stichting-pk.piwik.pro https://stichting-pk.containers.piwik.pro https://*.userway.org https://consent.app.cookieinformation.com https://*.google.com https://*.al
strict-transport-security: max-age=31536000;

Links to (3)

Linked from (1)

u-centraal.nl×1