joomlacommunity.nl

HTML metadata

Title: De Nederlandstalige Joomla!-portal
Language: nl-nl
Generator: JoomlaCommunity.nl
Canonical: https://joomlacommunity.nl/

Technology

CDN: Cloudflare
CMS: Joomla

Analytics

Google Tag Manager

Ads

Google AdSense

Third-party hosts loaded (5)

ik.imagekit.io×7
pagead2.googlesyndication.com×1
www.google.com×1
www.googletagmanager.com×1
www.googletagservices.com×1

DNS records live

NS

ruth.ns.cloudflare.com
will.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google

Email authentication partial

SPF

v=spf1 include:_spf.mailersend.net include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; pct=100; fo=1; ri=3600; rua=mailto:dmarc-reports@joomlacommunity.nl,mailto:f3a1a2abd40d45daaeb90ccd4f4b70cc@dmarc-reports.cloudflare.net,mailto:695f34e5@inbox.ondmarc.com,mailto:f3a1a2abd40d45daaeb90ccd4f4b70cc@dmarc-reports.cloudflare.net; ruf=mailto:ruf-reports@joomlacommunity.nl,mailto:695f34e5@inbox.ondmarc.com;

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYFQgrCwbZOgrSOzQvqe8b7nvvgZqOywSDSoIDjdAubK3rX5kNTPMs4Jjh66WcwvH5HygSL2zTr5LH…

selectors probed

Certificate (current)

WE1

from 2026-04-25 to 2026-07-24

Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://joomlacommunity.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.google.com *.googlesyndication.com *.googletagservices.com *.google.nl *.googletagmanager.com *.gstatic.com securepubads.g.doubleclick.net *.google-analytics.com *.googleadservices.com cdn.ampproject.org *.googleapis.com *.licdn.com *.notist.cloud *.jsfiddle.net *.fontawesome.com https://cpwebassets.codepen.io https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' *.googleapis.com *.googletagmanager.com; connect-src 'self' blob: *.google-analytics.com *.doubleclick.net *.googlesyndication.com *.hcaptcha.com *.gstatic.com *.fontawesome.com https://www.googletagservices.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google; frame-src 'self' *.google.com *.googletagmanager.com *.youtube.com *.youtube-nocookie.com *.googlesyndication.com *.doubleclick.net noti.st jsfiddle.net https://codepen.io/ https://fledge.eu.criteo.com https://*.adtrafficquality.google; font-src 'self'
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin