houwelingen-partners.nl

HTML metadata

Title: Home | Van Houwelingen & Partners
Description: Binnen 24 uur inzicht in de slagingskans van uw incassotraject. Dien direct uw zaak in bij Van Houwelingen & Partners.
Language: nl
Generator: SEOmatic
Canonical: https://www.houwelingen-partners.nl/

Open Graph

url: https://www.houwelingen-partners.nl/
title: Home
locale: nl
site name: Van Houwelingen & Partners
description: Binnen 24 uur inzicht in de slagingskans van uw incassotraject. Dien direct uw zaak in bij Van Houwelingen & Partners.

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Email

info@houwelingen-partners.nl

Phone

tel:010 - 460 44 66

DNS records live

NS

ns1.masterdns.nl
ns2.masterdns.nl

MX

10 mail2.creditcloud.nl
20 mail.creditcloud.nl

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 include:creditcloud.nl include:spf.spamx.denit.net include:mailgun.org include:_spf.transip.email ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0Yzx5NI9F6S+zFCelgOUS5MSlN0MFyhCvsPkia7sbpHxMxdL9y8HWbL3dta7Wpd1nBWz8W9lKqUaKAQ/ywdFFOWVCqRN…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA EV R36

from 2025-10-15 to 2026-11-03

Expires in 151 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.houwelingen-partners.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://consent.cookiebot.com https://www.google.com https://ajax.googleapis.com https://www.gstatic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; img-src 'self' data: https:; connect-src 'self' https://www.google.com https://region1.google-analytics.com https://consentcdn.cookiebot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.nl https://ad.doubleclick.net https://feed-proxy.craftcms.com https://api.craftcms.com; frame-src 'self' https://consentcdn.cookiebot.com https://www.google.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; upgrade-insecure-
strict-transport-security: max-age=31536000; includeSubDomains; preload