meerpaal.nl

HTML metadata

Title: Home | Meerpaal
Language: nl
Canonical: https://www.meerpaal.nl/

Open Graph

url: https://www.meerpaal.nl/
title: Home | Meerpaal

Technology

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×2
fonts.gstatic.com×1
translate.google.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

0321 388 777

DNS records live

NS

janet.ns.cloudflare.com
titan.ns.cloudflare.com

MX

0 meerpaal-nl.mail.protection.outlook.com

Verified for

GlobalSign

Email authentication strong

SPF

v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7phtUTqeigj8MjJSD0yzTaboGQOGhmcuWu2fzEWIbNBk2VSOfaj06Wwb0chLQaoC19B5hyJUlSQUgW…
mail: v=DKIM1; k=rsa; h=sha256; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjdTQ85i6samcDPA/5ei/l1BPxFnsoEYc1XKM6Ia7jebD1cgzv5l1XIjbTDJKAqtC48t…

selectors probed

Certificate (current)

R12

from 2026-05-20 to 2026-08-18

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.meerpaal.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: unsafe-url
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=()
x-content-type-options: nosniff
content-security-policy: block-all-mixed-content; base-uri 'self'; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* *.google.com *.gstatic.com www.google-analytics.com *.addtoany.com use.fontawesome.com *.youtube.com *.ytimg.com *.googleapis.com googleapis.com *.googletagmanager.com *.cloudflare.com *.vimeo.com cdn.jsdelivr.net recaptcha.net *.doubleclick.net *.facebook.net *.cookiecode.nl connect.facebook.net www.googleadservices.com googleads.g.doubleclick.net *.clarity.ms http://cdn.cookie-script.com *.cookie-script.com media.meerpaal.nl; style-src 'self' 'unsafe-inline' *.googleapis.com googleapis.com *.google.com *.addtoany.com cloud.typography.com *.myfonts.net *.typekit.net *.cloudflare.com cdn.jsdelivr.net *.cookiecode.nl *.facebook.net *.googletagmanager.com *.gstatic.com http://cdn.cookie-script.com *.cookie-script.com media.meerpaal.nl; font-src 'self' *.gstatic.com data: *.typekit.net *.cloudflare.com media.meerpaal.nl; img-src 'self' data: *.google-analytics.com *.a
strict-transport-security: max-age=31536000