secondhome.nl

.nl crawl

First seen 2026-05-31 · Last seen 2026-06-01 · ok HTTP/1.1 200 327 ms crawled 2026-06-01

US · 104.26.10.203 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Een vakantiewoning kopen? Bezoek de Second Home Beurs
Description
Een tweede huis of vakantiewoning kopen? Bezoek de Second Home Beurs, met een ruim aanbod van recreatiewoningen in binnen- en buitenland.
Language
nl-NL
Canonical
https://www.secondhome.nl/
Translations
  • en
  • nl

Open Graph

url
https://www.secondhome.nl/
title
Home
locale
nl_NL
site name
Second Home Beurs
description
Een tweede huis of vakantiewoning kopen? Bezoek de Second Home Beurs, met een ruim aanbod van recreatiewoningen in binnen- en buitenland.

Technology

CDN
Cloudflare
CMS
WordPress
jQuery
3.7.1

Social

Contact

Phone

DNS records live

NS
  • kiki.ns.cloudflare.com
  • rudy.ns.cloudflare.com
MX
  • 0 secondhome-nl.mail.protection.outlook.com
Verified for
  • Google

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:_spf.exonet.nl include:amazonses.com include:mailgun.org include:mailplus.nl include:_spf.shared.lvl.li include:secondhome-web01.timetocode.net include:secondhome-test01.timetocode.net ip4:87.239.8.61 ip4:87.239.8.150 ip4:52.19.9.112 -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:dmarc@mail.secondhome.nl
policy: reject (enforced)
DKIM
  • mail: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuviLVj0NtxkLLazwGkPaMkA0ipyuscg7Xf17dogPKFFJykxXKA4HTBGqn8voV5nMRBEczgmJZmIPkM…
selectors probed

Certificate (current)

WE1
from 2026-05-01 to 2026-07-30
Expires in 57 days

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.secondhome.nl/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • short HSTS max-age
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'unsafe-inline' https: data:; img-src data: https: blob: android-webview android-webview-video-poster:; font-src data: https:; connect-src * data:; media-src https: data: blob:; worker-src https: blob:; frame-src 'self' https: blob:; frame-ancestors 'self'; upgrade-insecure-requests
strict-transport-security
max-age=2592000

Links to (2)

Linked from (4)