indexo.dev

onboardcourier.nl

.nl crawl

First seen 2026-05-29 · Last seen 2026-05-29 · ok HTTP/1.1 200 417 ms crawled 2026-05-31

NL · 87.233.219.34 · AS15703 TrueFullstaq B.V.

Reputation 100/100

Classifying

HTML metadata

Title
Onboardkoerier
Description
Onze onboardkoerier garandeert snelle en veilige levering wereldwijd. Neem vandaag nog contact met ons op voor een persoonlijke en betrouwbare service.
Language
nl
Canonical
https://onboardcourier.nl/
Translations
  • nl

Open Graph

url
https://onboardcourier.nl/
title
Onboardkoerier
description
Onze onboardkoerier garandeert snelle en veilige levering wereldwijd. Neem vandaag nog contact met ons op voor een persoonlijke en betrouwbare service.

Technology

Server
Apache
jQuery
3.5.1
Stack
PHP
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (6)

  • cdn.dotsimpel.nl×11
  • fonts.googleapis.com×3
  • www.googletagmanager.com×3
  • www.google.com×2
  • cdn.bimpelcms.com×1
  • i.ibb.co×1

Contact

Email
Phone

DNS records live

NS
  • ns1.openprovider.nl
  • ns2.openprovider.be
  • ns3.openprovider.eu
MX
Show 7 MX records
  • 1 aspmx.l.google.com
  • 10 aspmx2.googlemail.com
  • 10 aspmx3.googlemail.com
  • 10 aspmx4.googlemail.com
  • 10 aspmx5.googlemail.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
Verified for
  • Google

Email authentication strong

SPF
v=spf1 include:_spf.google.com include:_spf.dotsimpel.nl ~all
softfail (~all)
DMARC
v=DMARC1; p=reject
policy: reject (enforced)
DKIM
  • default: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDE/fnB/zJxB5geJR92LBhrW2LkU0TjEv+zN7E+ymhcRF2s/bpRiSt/E/IAyrDzExBX5jUulqQYUBNLdrataVh7ls4gH…
selectors probed

Certificate (current)

R12
from 2026-03-28 to 2026-06-26
Expires in 25 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://onboardcourier.nl/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), microphone=(), camera=()
x-content-type-options
nosniff
content-security-policy
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https: wss://*.tawk.to; object-src 'none'; base-uri 'self'; frame-ancestors 'self'
strict-transport-security
max-age=31536000; includeSubDomains

Links to (2)

Linked from (1)