jouwggd.nl

HTML metadata

Title: Jouw GGD
Description: JouwGGD.nl is de jongerenwebsite van GGD’en en JGZ-organisaties in Nederland. De website is bedoeld voor jongeren tussen de 13 en 23 jaar. Op deze site vind je betrouwbare informatie over gezondheid, relaties, lichaam, seks, gevoel, alcohol, roken, drugs en media. De informatie is gecheckt door (medische) professionals.
Language: nl

Open Graph

title: Jouw GGD
description: JouwGGD.nl is de jongerenwebsite van GGD’en en JGZ-organisaties in Nederland. De website is bedoeld voor jongeren tussen de 13 en 23 jaar. Op deze site vind je betrouwbare informatie over gezondheid, relaties, lichaam, seks, gevoel, alcohol, roken, drugs en media. De informatie is gecheckt door (medische) professionals.

Technology

CMS: WordPress
JS framework: Angular 20.3.17

Fonts

Google Fonts

Third-party hosts loaded (3)

cdn-eu.readspeaker.com×1
fonts.googleapis.com×1
fonts.gstatic.com×1

Social

Registration

Registrar

Realtime Register

Created

2011-03-01

Updated

2024-01-04

Name servers

ns2.argewebhosting.com
ns3.argewebhosting.nl
ns1.argewebhosting.eu

DNS records live

NS

ns1.argewebhosting.eu
ns2.argewebhosting.com
ns3.argewebhosting.nl

MX

0 jouwggd-nl.mail.protection.outlook.com

TXT

_x9tydu4dvxv8cavbsn6n92blbazqx32
_tsg08g3nwuv9j04ftz0966ovfs8jyp6.dcv.digicert.com

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHBNWLFYyqjg7LNx/4RneYcbmD8D1V1Jd6qyXGSdgT8yqvI6DBp57nFQyJX5Rby0vfTPTcFsNi6Aen…

selectors probed

Certificate (current)

DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

from 2025-12-15 to 2026-11-20

Expires in 172 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://jouwggd.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: trusted-types angular angular#components; default-src 'self' http://app-eu.readspeaker.com; img-src 'self' data: https://jggdproduasset.blob.core.windows.net https://jouwggd.nl; script-src 'self' 'nonce-fa5ffff4-d5ad-404c-95c5-f817380a4f5b' https://ggdghornl.containers.piwik.pro https://cdn-eu.readspeaker.com http://localhost:4200; style-src 'self' 'nonce-fa5ffff4-d5ad-404c-95c5-f817380a4f5b' https://fonts.googleapis.com https://cdn-eu.readspeaker.com; font-src 'self' https://fonts.gstatic.com data:; style-src-attr 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com; connect-src 'self' https://ggdghornl.containers.piwik.pro https://ggdghornl.piwik.pro https://cdn-eu.readspeaker.com http://app-eu.readspeaker.com https://media-eu.readspeaker.com https://vttts-eu.readspeaker.com https://jouwggd.nl/cms/;
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: same-origin