hartjewonen.nl

HTML metadata

Title: Hartje Wonen Nieuwbouw Platform
Description: Hartje Wonen is er voor: projectontwikkelaars, verkoopmanagers, makelaars en marketingbureaus.
Language: nl
Canonical: https://hartjewonen.nl/nl/home

Open Graph

url: https://hartjewonen.nl/home
title: Hartje Wonen Nieuwbouw Platform
site name: Hartje Wonen
description: Hartje Wonen is er voor: projectontwikkelaars, verkoopmanagers, makelaars en marketingbureaus.

Technology

PHP: 8.3.31 security-only
Stack: Laravel

Analytics

Google Tag Manager

Ads

Meta Pixel

Third-party hosts loaded (4)

s3.k8s.shockmedia.nl×3
challenges.cloudflare.com×1
connect.facebook.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

Internationale Domeinregistratie Nederland

Created

2012-04-24

Updated

2025-07-03

Name servers

ns1.transip.nl
ns2.transip.eu
ns0.transip.net

DNS records live

NS

ns0.transip.net
ns1.transip.nl
ns2.transip.eu

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

MS=53B5ADC68FF64ED91B0EAAD342C8D638E36DA246

Verified for

Google

Email authentication weak

SPF: v=spf1 include:spf.mandrillapp.com include:_spf.google.com ?all
neutral (?all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-05 to 2026-07-04

Expires in 29 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://hartjewonen.nl/home

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

missing Content Security Policy
weak frame protection

Header values

referrer-policy: same-origin
x-frame-options: allow-from 'self' hartjewonen.nl www.hartjewonen.nl
permissions-policy: accelerometer=(self), ambient-light-sensor=(self), attribution-reporting=*, autoplay=(self), bluetooth=(self), browsing-topics=*, camera=(self), compute-pressure=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=*, encrypted-media=(self), fullscreen=(self), gamepad=(self), geolocation=(self), gyroscope=(self), hid=(self), identity-credentials-get=(self), idle-detection=(self), local-fonts=(self), magnetometer=(self), microphone=(self), midi=(self), otp-credentials=(self), payment=(self), picture-in-picture=*, publickey-credentials-create=(self), publickey-credentials-get=(self), screen-wake-lock=(self), serial=(self), speaker-selection=(self), storage-access=*, usb=(self), web-share=(self), window-management=(self), xr-spatial-tracking=(self)
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin