leergelddenhaag.nl

HTML metadata

Title: Welkom bij Leergeld Den Haag
Description: Wij helpen kinderen en jongeren met spullen, zodat zij kunnen meedoen en hun talent kunnen ontdekken.
Language: nl
Canonical: https://www.leergelddenhaag.nl/

Open Graph

url: https://www.leergelddenhaag.nl/
title: Welkom bij Leergeld Den Haag
description: Wij helpen kinderen en jongeren met spullen, zodat zij kunnen meedoen en hun talent kunnen ontdekken.

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (2)

ik.imagekit.io×10
www.googletagmanager.com×1

Social

Contact

Email

haaginfo@leergelddenhaag.nl

Phone

+31 (0)70 - 360 1337

Address

Newtonstraat 4V2562 KR Den Haaginfo@leergelddenhaag.nl

DNS records live

NS

ns1.combell.eu
ns3.combell.net
ns4.combell.net

MX

0 leergelddenhaag-nl.mail.protection.outlook.com

TXT

q894c326ge00ojmn92n4rtd9nk

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 include:_spf.mailersend.net include:_spf.relay.mailprotect.be include:spf.protection.outlook.com a mx a:filemaker.leergelddenhaag.nl a:leergelddenhaag.resetcloud.nl ip4:77.241.81.46 ip6:2603:10a6:803:7f::18 ip4:176.62.168.242 ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMpKfuodefCzAilCZ9hzwUdwQJ9cZAnteoLqYFFeGPNpoPhWihtU8aTaPqA9iTuG4dSJqqVupbQragBTxkBK…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA EV R36

from 2025-06-27 to 2026-06-28

Expires in 27 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.leergelddenhaag.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self)
x-content-type-options: nosniff
content-security-policy: default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; img-src 'self' https://*.leergelddenhaag.nl ik.imagekit.io data: https://*.google-analytics.com https://*.googletagmanager.com https://*.gstatic.com https://i.ytimg.com; font-src 'self' https://fonts.gstatic.com data:; script-src https 'self' 'unsafe-eval' 'unsafe-inline' https://*.leergelddenhaag.nl polyfill.io unpkg.com cdn.jsdelivr.net *.recaptcha.net *.gstatic.com https://*.googletagmanager.com https://tagmanager.google.com https://npmcdn.com; style-src 'self' 'unsafe-inline' https://*.leergelddenhaag.nl https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; worker-src blob:; frame-src 'self' youtu.be www.youtube.com www.youtube-nocookie.com www.recaptcha.net; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.recaptcha.net
strict-transport-security: max-age=63072000; includeSubDomains; preload