masterofseeds.nl

HTML metadata

Title

Master of Seeds — Premium Cannabis Zaden, Headshop & Smartshop

Description

Koop premium cannabiszaden online. Gefeminiseerde, autoflower & CBD-zaden van topkwekers. Snelle, discrete verzending vanuit Nederland. Free shipping over €39.

Language

nl

Canonical

https://masterofseeds.com

Translations

cs
de
en
es
fr
it
nl
pl
sv

Open Graph

url: https://masterofseeds.com
title: Master of Seeds — Premium Cannabis Zaden, Headshop & Smartshop
description: Koop premium cannabiszaden online. Gefeminiseerde, autoflower & CBD-zaden van topkwekers. Snelle, discrete verzending vanuit Nederland.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (10)

masterofseeds.com×3
www.googletagmanager.com×2
masterofseeds.cz×1
masterofseeds.de×1
masterofseeds.es×1
masterofseeds.fr×1
masterofseeds.it×1
masterofseeds.pl×1
masterofseeds.se×1
widget.trustpilot.com×1

Social

Contact

Phone

0858209902

Registration

Registrar

Hostnet B.V.

Created

2025-11-30

Updated

2025-12-08

Name servers

hank.ns.cloudflare.com
reza.ns.cloudflare.com

DNS records live

NS

hank.ns.cloudflare.com
reza.ns.cloudflare.com

TXT

trustpilot-one-time-verification-id=42430dc7-c084-45bd-bce8-f052ec89a0d4

Email authentication no MX

SPF: v=spf1 a mx include:_spf.hostnet.nl -all
strict (-all)
DMARC: v=DMARC1; p=reject
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-06 to 2026-07-05

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://masterofseeds.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; form-action 'self' https://www.mollie.com https://*.mollie.com; frame-ancestors 'none'; frame-src https://www.googletagmanager.com https://widget.trustpilot.com https://*.trustpilot.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://app.weply.chat https://widget.trustpilot.com https://*.trustpilot.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.weply.chat https://region1.google-analytics.com https://widget.trustpilot.com https://*.trustpilot.com; object-src 'none'; upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains; preload