itsmenederland.nl

HTML metadata

Title: itsme Nederland | Homepage
Language: en

Open Graph

url: https://www.itsmenederland.nl/
title: itsme Nederland | Homepage

Technology

CDN: Amazon CloudFront
Server: *
jQuery: 3.2.1 known XSS (<3.5)
Stack: Java

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

d36wi5vgvc34gm.cloudfront.net×15
cdnjs.cloudflare.com×3
cdn.jsdelivr.net×1
fonts.googleapis.com×1
www.googletagmanager.com×1

DNS records live

NS

ns0.transip.net
ns1.transip.nl
ns2.transip.eu

MX

5 itsmenederland-nl.mail.protection.outlook.com

Verified for

Google
Microsoft 365

Email authentication partial

SPF

v=spf1 mx ip4:195.243.225.91 ip4:5.102.138.187 ip4:5.102.138.137 include:spf.protection.outlook.com include:amazonses.com include:eu-west-1.amazonses.com include:spf.emarsys.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none; sp=none; adkim=r; aspf=r; ruf=mailto:t.debie@itsmenederland.nl!5m

policy: none (monitoring only) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpGCQ9ZdwOZfuOSPe2XnVJyhXeds6eEHUbH8yr2KZnPZQJudgWRsyvg03mp03ZDo8IGU+Lc0EbPXAy…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSki6ScTuTctHx3czxPSsHKMs9zcDWslAOnrA2w4WxXyf8G7kPzOgtcMbh7RiSGlSsoN1XmI3HPlzp…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-12-01 to 2026-12-02

Expires in 184 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.itsmenederland.nl/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://service.ariba.com https://s1.ariba.com https://s1-s2.ariba.com https://s2.ariba.com https://s1-2-eu.ariba.com https://s1-2.ariba.com https://dsrmcs01.apollotyres.com https://qsrmcs01.apollotyres.com https://psrmcs01.apollotyres.com https://qsrmcs01.apollotyres.com:50001 https://dsrmcs01.apollotyres.com:50001 https://psrmcs01.apollotyres.com:50001 https://s1-eu.ariba.com https://stgadmin.itsmehosting.com https://istem.itsmehosting.com https://service-2.ariba.com https://srm7.linde.grp https://int-srm.america.apci.com:9080 https://eudemo5.corcentricplatform.com https://punchoutcommerce.com https://ebusiness-qas.sabic.com https:supplierselfservices-qas.sabic.com https://juhdq09.sabic.com:1443/* https://juhdq09.sabic.com https://juhdq09.sabic.com:1443/* https://juhdq09.sabic.com:1443/ https://erp-qas.sabic.com https://erp.sabic.com https://ebusiness.sabic.com https://supplierselfservices.sabic.com https://p09aas00.sabic.com:1443/* https://p09aas01.sabic.c
strict-transport-security: max-age=31536000 ; includeSubDomains