indexo.dev

healthtrain.app

.app crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 1244 ms crawled 2026-06-01

NL · 80.69.67.1 · AS34762 Combell NV

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
HealthTrain: Digitale zorg voor iedereen
Description
HealthTrain biedt digitale ondersteuning voor persoonlijke zorg. Altijd en overal toegankelijk.
Language
en-US
Generator
WordPress 7.0
Canonical
https://www.healthtrain.app/
Feeds

Open Graph

url
https://www.healthtrain.app/
title
HealthTrain: Digitale zorg voor iedereen
locale
en_US
site name
HealthTrain
description
HealthTrain biedt digitale ondersteuning voor persoonlijke zorg. Altijd en overal toegankelijk.

Technology

Server
nginx
CMS
WordPress 7.0
jQuery
3.7.1
Stack
PHP
Analytics
  • Google Tag Manager

Third-party hosts loaded (4)

  • js-eu1.hs-scripts.com×2
  • kit.fontawesome.com×2
  • healy2.site.transip.me×1
  • www.googletagmanager.com×1

Social

Contact

Phone

DNS records live

NS
  • ns0.transip.net
  • ns1.transip.nl
  • ns2.transip.eu
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
Verified for
  • Google

Email authentication strong

SPF
v=spf1 include:_spf.google.com include:mailgun.org include:spf.flowmailer.net include:145537445.spf02.hubspotemail.net ip4:136.144.206.116 ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; rua=mailto:watchdog1@watchdog.kevlarr.io,mailto:dmarc@inbound.flowmailer.net; ruf=mailto:dmarc@inbound.flowmailer.net; fo=1
policy: reject (enforced) · sp=reject
DKIM
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDyvfBPNZxpo5W2+kDpSD0v349xSBcaoMy/U1sXaSbQcGSPZUGFsGfBHEwZdgm8WblKBiHnHVv6NDE…
  • s1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVhmsldrAVsM8o84+FbRXNVdTJBsnSQzrEQ/c2ul8uYvUcOtxtj7YVbTTN+GUtAS8fXTSMAX+lzTExSNdgDM2iA9ALpIq…
selectors probed

Certificate (current)

R12
from 2026-04-19 to 2026-07-18
Expires in 45 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.healthtrain.app/

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (2)