indexo.dev

iom-nederland.nl

.nl crawl

First seen 2026-05-21 · Last seen 2026-05-27 · ok HTTP/1.1 200 3167 ms crawled 2026-05-27

BE · 185.162.30.114 · AS34762 Combell NV

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
IOM in the Netherlands Helps - IOM Nederland
Description
IOM the Netherlands promotes humane migration management and fosters collaboration on migration issues, offering practical solutions and humanitarian assistance
Language
en-gb
Generator
IOM Nederland
Canonical
https://iom-nederland.nl/en
Translations
  • nl

Open Graph

title
IOM in the Netherlands Helps - IOM Nederland
description
IOM the Netherlands promotes humane migration management and fosters collaboration on migration issues, offering practical solutions and humanitarian assistance

Technology

Server
nginx
CMS
Joomla
Analytics
  • Google Tag Manager
Social widgets
  • YouTube Embed

Third-party hosts loaded (2)

  • www.googletagmanager.com×1
  • www.youtube.com×1

Social

DNS records live

NS
  • ns1.european-server.eu
  • ns3.european-server.com
  • ns4.european-server.com
MX
  • 10 mx.mailprotect.be
  • 50 mx.backup.mailprotect.be

Email authentication partial

SPF
v=spf1 include:_spf.relay.mailprotect.be include:spf.mailcamp.nl -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:rua-reports@iom-nederland.nl,mailto:ruo@report.rect.to; ruf=mailto:ruf-reports@iom-nederland.nl,mailto:ruf@report.rect.to; fo=1;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-05-12 to 2026-08-10
Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://iom-nederland.nl/en

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(),autoplay=(),camera=(),display-capture=(),document-domain=(),encrypted-media=(),fullscreen=(),geolocation=(self),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),web-share=(),xr-spatial-tracking=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; style-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://s3.amazonaws.com https://www.google-analytics.com https://connect.facebook.net https://*.adobe.com; font-src 'self' data:; frame-src https://www.youtube-nocookie.com https://www.facebook.com/ https://sway.office.com https://www.youtube.com https://*.adobe.com https://social.shorthand.com https://sway.cloud.microsoft; img-src 'self' data: https://www.facebook.com https://www.google.com https://www.google.nl https://www.googletagmanager.com https://*.adobe.com https://i.ytimg.com; connect-src 'self' https://*.google-analytics.com/ https://stats.g.doubleclick.net https://www.facebook.com; frame-ancestors 'self'
strict-transport-security
max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy
same-origin

Links to (5)

Linked from (2)