golf.nl

HTML metadata

Title: Golf.nl • Hét platform voor golfend Nederland
Language: nl

Open Graph

url: http://www.golf.nl/
title: Home
locale: nl_NL
site name: Golf.nl - Hét platform voor golfend Nederland

Technology

CDN: Amazon CloudFront
Server: Microsoft-IIS
CMS: Ghost

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)

Cookie consent

Cookiebot

Fonts

Adobe Fonts

Third-party hosts loaded (5)

consent.cookiebot.com×1
securepubads.g.doubleclick.net×1
use.typekit.net×1
www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Metaregistrar B.V.

Created

1996-01-10

Updated

2022-10-10

Name servers

ns-1652.awsdns-14.co.uk
ns-1262.awsdns-29.org
ns-928.awsdns-52.net

DNS records live

NS

ns-1262.awsdns-29.org
ns-1652.awsdns-14.co.uk
ns-17.awsdns-02.com
ns-928.awsdns-52.net

MX

0 golf-nl.mail.protection.outlook.com
5 mailfilter1b.mijndomein.nl.golf.nl
5 mailfilter2b.mijndomein.nl.golf.nl

Verified for

Meta
Microsoft 365

Email authentication partial

SPF

v=spf1 a mx ip4:188.93.144.85/21 ip4:82.201.94.68 ip4:82.201.94.69 ip4:193.239.132.0/24 ip6:2a00:4e40:1:1::7:1/120 include:spf.protection.outlook.com include:spf.mandrillapp.com include:_spf.online.superoffice.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1vAY/KZ0PYWwjW1qVsxINMDbaoLwtGHBYXUNwOG2v8DB9CxbNKI6sscfDiw8M9Dt/uS2tnCd4ct3Fo8Dyc7…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzqM6lHoRgSYKF9mWmGfcltOMgKVjbBb+Gn3/QUA/+hvBvnGeEGI0OXTsO2MpYMXsiI6STkA7xMUotOk4V…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLDvc7kpBNoW2BkSgBteNux26mOEhvrdMUptpBM1PnO+fJTh+9T4hVYylYhMgiOkIBaKt+DvItcj1OOm5WyQ8Nij…

selectors probed

Certificate (current)

Amazon ECDSA 256 M04

from 2025-09-09 to 2026-10-09

Expires in 130 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.golf.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=self, camera=self, microphone=self
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' t.co twitter.com;block-all-mixed-content;script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' *.golf.nl *.ngf.nl *.newrelic.com *.ep-mimecast.ads-twitter.com *.doubleclick.net *.google.com *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.google-analytics.com *.core.windows.net *.twitter.com *.cookiebot.com *.facebook.net *.linkedin.com *.licdn.com *.twimg.com *.adtrafficquality.google *.googletagmanager.com *.googleapis.com *.youtube.com *.addthis.com *.ads-twitter.com *.golfbox.dk *.hotjar.com *.spotify.com t.co *.typekit.net *.gstatic.com *.highcharts.com *.instagram.com *.tiktok.com *.framer.com framer.com framerusercontent.com app.framerstatic.com strawpoll.com cdn.strawpoll.com;style-src 'self' 'report-sample' 'unsafe-inline' *.typekit.net *.licdn.com *.google.com *.twitter.com *.golfbox.dk *.twimg.com *.googletagmanager.com strawpoll.com cdn.strawpoll.com;object-src *.googlesyndication.com;child-src 'self' blob: *.golf.nl
strict-transport-security: max-age=31536000; includeSubDomains; preload