gezondeschool.nl

.nl crawl

First seen 2026-05-21 · Last seen 2026-05-30 · ok HTTP/1.1 200 1905 ms crawled 2026-05-27

NL · 164.92.159.139 · AS14061 DigitalOcean, LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Home | Gezonde School
Language: nl

Technology

Server: nginx
CMS: Drupal
JS framework: Angular 18.2.12

Third-party hosts loaded (2)

cdn.atabase.nl×2
static.addtoany.com×1

Social

DNS records live

NS

ns1.argewebhosting.eu
ns2.argewebhosting.com
ns3.argewebhosting.nl

MX

1 gezondeschool-nl.mail.protection.outlook.com

TXT

_tmyh2jr3mcnsuzc1u9xqlegm1tuk7kk

Verified for

Google

Email authentication partial

SPF

v=spf1 ip4:82.204.43.42 ip4:5.39.185.31 ip4:85.10.150.21 include:mx.elonisas.nl include:spf.protection.outlook.com include:spf.topdesk.net include:_spf.exsilia.net -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:t6ezpphgao@rua.powerdmarc.com; ruf=mailto:t6ezpphgao@ruf.powerdmarc.com; fo=1;

policy: none (monitoring only)

DKIM

default: v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJ/KE+VjEQx0+1FBELvdLgvRaGjk8ZR2zspc5CFE+xX4kMN0agMbQr8fsxARl020yfbzNVJhj0YvACW…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugJT0D7O4v7/K6QvW66ZUMWxH+1T04qAJd2VA0ow5Sb/7kdquy39ga2EPKqMWwAOtEPm4uQIuusAg2…

selectors probed

Certificate (current)

DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

from 2025-12-18 to 2027-01-15

Expires in 228 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.gezondeschool.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; frame-src 'self' https://*.spotify.com/ https://anchor.fm/ https://static.addtoany.com/ https://www.youtube.com/; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://*.google-analytics.com/ https://consent.studio/ https://cdn.atabase.nl/ https://*.googletagmanager.com/ https://*.addtoany.com/; img-src 'self' data: https://cms.gezondeschool.nl/ https://glsb-rivm.api.dms.atabase.nl/; style-src 'self' 'unsafe-inline' https://*.atabase.nl/ https://*.typekit.net/ https://unpkg.com/; font-src 'self' data: https://*.typekit.net/ https://fonts.gstatic.com/ https://unpkg.com/; object-src 'none'; connect-src 'self' https://cms.gezondeschool.nl/ https://glsb-rivm.api.accounts.atabase.nl/ https://consent.studio/ https://*.google-analytics.com/ https://*.algolia.net https://*.algolianet.com https://*.algolia.io;
strict-transport-security: max-age=63072000; includeSubDomains