gemeentestein.nl

HTML metadata

Title

Welkom bij de gemeente Stein - Gemeente Stein

Description

Informatie voor inwoners van de gemeente Stein.

Language

nl

Generator

Sitebox CMS

Canonical

https://www.gemeentestein.nl/

Feeds

Alle Actualiteiten RSS
Toeristische activiteiten RSS
Actualiteiten voor ondernemers RSS
Actualiteiten voor verenigingen RSS
Actualiteiten wijkactieprogramma Nieuwdorp RSS
Algemene actualiteiten RSS

Technology

Server: Apache
CMS: Gatsby
Stack: PHP

Analytics

Google Tag Manager

Third-party hosts loaded (3)

app-script.monsido.com×1
cdn1.readspeaker.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

0464359393

DNS records live

NS

ns0.transip.net
ns1.transip.nl
ns2.transip.eu

MX

0 gemeentestein-nl.o-v1.mx.microsoft

TXT

gs3VArDxj0NwkRih5geHhBBLmaedaKum5nSDnKEED5tavk8Nnln4EmJCCg0Jd9To
aEoiL44pVbANj0SNzwJ1GkbE4PsRkSORKD4PQe2DDAr5rg8Xcl7OcGbdvQ07VRhG
v=NTA7516-1;startdate=2024-01;enddate=2027-01;provider=zorgmail;ntamx=10 relay.zorgmail.nl

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 mx ip4:109.232.44.1 ip4:149.210.214.6 include:spf.protection.outlook.com include:spf.simgroephosting.nl include:overheid.care.nl include:_spf.zorgmail.nl a:prd-mailserver.iburgerzaken.nl ip4:185.49.50.14 ip6:2a04:b700:185d:1825::14 ip4:193.163.108.129 include:spf.pinkprivate.cloud ip4:84.241.182.230 include:spf.flowmailer.net ip4:109.232.44.1 include:spf.topdesk.net -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:DMARC@gemeentestein.nl; ruf=mailto:DMARC@gemeentestein.nl; fo=1; adkim=r; aspf=r;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoZuk1kuMLHx9jtg7I0S1m27oru0R/mIL8n9zsgdELoGIJVkEjm+6GvnuGE5mO80ifOUocD0JEkwjC…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphXoiDJy5A97dmhaRxpWS5STtTgSRbbxKu1SbK8ic20hNnJIyMXauYWzew4sr0TkLlIZcp+NZbKd0h…

selectors probed

Certificate (current)

R13

from 2026-05-07 to 2026-08-05

Expires in 64 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.gemeentestein.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline' hello.myfonts.net cdn1.readspeaker.com f1-eu.readspeaker.com static.mailplus.nl fonts.googleapis.com assets.spotlersearch.com; font-src 'self' data: fonts.gstatic.com f1-eu.readspeaker.com; img-src 'self' data: www.google-analytics.com www.googletagmanager.com region1.google-analytics.com static.mailplus.nl www.toegankelijkheidsverklaring.nl maps.googleapis.com maps.gstatic.com www.google.com cdn1.readspeaker.com tracking.monsido.com f1-eu.readspeaker.com assets.spotlersearch.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com region1.google-analytics.com www.googletagmanager.com cdn1.readspeaker.com f1-eu.readspeaker.com static.mailplus.nl m1.mailplus.nl maps.googleapis.com app-script.monsido.com heatmaps.monsido.com assets.spotlersearch.com; connect-src 'self' cognito-identity.eu-central-1.amazonaws.com firehose.eu-central-1.amazonaws.com www.google-analytics.com region1.google-analytics.com app-eu.readspe
strict-transport-security: max-age=31536000; includeSubDomains; preload