ngf.nl

HTML metadata

Title: De officiële website van de Koninklijke Nederlandse Golf Federatie - NGF
Description: De officiële website van de Nederlandse Golf Federatie • Waarom golf? ✓ Handicapinformatie ✓ Organisatie ✓ Topgolf ✓ Clubinformatie
Language: nl
Canonical: https://www.ngf.nl/

Open Graph

url: http://www.ngf.nl/
title: Koninklijke Nederlandse Golf Federatie
locale: nl_NL
site name: NGF
description: De officiële website van de Nederlandse Golf Federatie • Waarom golf? ✓ Handicapinformatie ✓ Organisatie ✓ Topgolf ✓ Clubinformatie

Technology

CDN: Amazon CloudFront
Server: Microsoft-IIS
CMS: Ghost

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.google.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

//030-2426370

DNS records live

NS

ns-1098.awsdns-09.org
ns-1604.awsdns-08.co.uk
ns-373.awsdns-46.com
ns-688.awsdns-22.net

MX

0 ngf-nl.mail.protection.outlook.com

TXT

Show 4 TXT records

v=DMARC1; p=none; rua=mailto:dmarcreport@ngf.nl; ruf=mailto:dmarcreport@ngf.nl
2C7LEJEE4SEMK6DS0FQFAR5S5
5397ok6qnc3qf121c2f16p918i
5vj0utvrepu77jtabig7njbked

Verified for

Apple
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf01.ngf.nl include:spf02.ngf.nl ?all

neutral (?all)

DMARC

v=DMARC1;p=none;pct=100;rua=mailto:dmarc@smtpeter.com

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwZkx1NZlGm2OIabWY9bqP2+aBs8HD8TfS+SeAjIBxJYothx7H9+TSVU1CXLuZ4VeKEGHjJDBUhBKe0kvqve…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
dkim: "v=DKIM1;k=rsa;g=*;s=email;h=sha256;t=;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCX3krjhOGIwB9O0L2hYLDGHjwMKVA/MlaCEYXCKB/BGnBV6twgfc3DK+y9ozn…
s1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs4EWVituU2iIDDTTTbKBixo6TM+aLKiryy61CCtUriBxX4P2YTsHYokRUnL2mLllRWi+bzjDWsPY+MX1AxCSOG75DdXq…

selectors probed

Certificate (current)

Amazon ECDSA 256 M04

from 2025-09-09 to 2026-10-09

Expires in 126 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.ngf.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=self, camera=self, microphone=self
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self';block-all-mixed-content;default-src 'self';script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://*.cookiebot.com *.googletagmanager.com https://*.youtube.com *.google-analytics.com https://*.hotjar.com https://*.google.com https://*.gstatic.com https://*.instagram.com;style-src 'self' 'report-sample' 'unsafe-inline' tagmanager.google.com *.googletagmanager.com;object-src 'none';frame-src 'self' *.youtube.com *.cookiebot.com *.hotjar.com *.google.com *.googletagmanager.com *.instagram.com *.facebook.com *.youtube-nocookie.com;child-src 'self' *.googletagmanager.com *.youtube.com;img-src 'self' data: blob: *.ytimg.com *.youtube.com *.google.com *.google-analytics.com *.cookiebot.com *.hotjar.com *.googletagmanager.com;font-src 'self' data: *.hotjar.com;connect-src 'self' *.hotjar.io wss://*.hotjar.com *.google.com *.google-analytics.com *.cookiebot.com *.doubleclick.net *.googletagmanager.com;manifest-src 'self';base-uri 'self';form-action 'self';
strict-transport-security: max-age=31536000; includeSubDomains; preload