parkbelterwiede.com

HTML metadata

Title: Waterpark Belterwiede in Wanneperveen | Officiële website
Description: Boek een vakantie nabij Giethoorn en kom tot rust in de unieke vakantiewoningen van Waterpark Belterwiede direct aan het water. Waterpark Belterwiede is de ideale bestemming voor een fietsvakantie of wandelvakantie het Nationaal Park de Weerribben Wieden.
Language: nl
Canonical: https://www.parkbelterwiede.com/

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (5)

newyse-res.cloudinary.com×15
cdn-wee-cms.maxxton.net×3
res.cloudinary.com×2
cdnjs.cloudflare.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

InterNetX GmbH

Created

2006-01-02

Expires

2027-01-02 211 days left

Updated

2025-04-20

Name servers

ns1.yourwebhoster.com
ns2.yourwebhoster.com
ns3.yourwebhoster.nl
ns4.yourwebhoster.nl

DNS records live

NS

ns1.yourwebhoster.com
ns2.yourwebhoster.com
ns3.yourwebhoster.nl
ns4.yourwebhoster.nl

MX

0 parkbelterwiede-com.mail.protection.outlook.com

Email authentication strong

SPF

v=spf1 ip4:109.71.54.21 +include:relay.mailchannels.net +include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;sp=reject;adkim=r;aspf=s;pct=100;fo=0;rf=afrf;ri=86400

policy: reject (enforced) · sp=reject

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZtiX97/piNhhUCsOvZbGlHW9II7lEOQOqMChUhE6Y37HL8UhndmR8QEaxSTuO7qlSj5LZ0q0wwSBT…

selectors probed

Certificate (current)

WR1

from 2026-04-15 to 2026-07-14

Expires in 39 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.parkbelterwiede.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors 'self'
strict-transport-security: max-age=31536000; includeSubDomains; preload