indexo.dev

nrgpallashuurtin.nl

.nl crawl

First seen 2026-05-28 · Last seen 2026-05-30 · ok HTTP/1.1 200 2002 ms crawled 2026-05-30

NL · 98.71.233.225 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title
NRGPALLAShuurtin.nl | Marktplaats
Language
nl

Technology

CMS
Ghost
Stack
ASP.NET
Analytics
  • Google Tag Manager

Third-party hosts loaded (1)

  • www.googletagmanager.com×1

DNS records live

NS
  • ns1.argewebhosting.eu
  • ns2.argewebhosting.com
  • ns3.argewebhosting.nl

Email authentication no MX

SPF
v=spf1 include:sendgrid.net ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:monitoring@tsf.nl
policy: none (monitoring only)
DKIM
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQZ9LZBN8kaEO2gfp+lltXy7ghRtYKFYXMIoX+uR3Q59Dtt19UqnIrAl7/WM1HjeRmiBafXfVJ1QPhxPMT…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeaGw1iLEP1pHVkK1eY0QAYV07fs3jOQMnO+nM1eDe3qkJwXkSBzqbG4jA0AHEhriaTSOG6TKGZsaKT+jF…
selectors probed

Certificate (current)

R13
from 2026-04-15 to 2026-07-14
Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.nrgpallashuurtin.nl/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
strict-origin
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=(), conversion-measurement=(), focus-without-user-activation=(), hid=(), idle-detection=(), interest-cohort=(), serial=(), sync-script=(), trust-token-redemption=(), window-placement=(), vertical-scroll=()
x-content-type-options
nosniff
content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com ; connect-src 'self' https://www.google-analytics.com ;
strict-transport-security
max-age=31536000

Links to (1)

Linked from (1)