sikkenscenter.nl

.nl crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 1327 ms crawled 2026-05-30

BE · 185.111.198.198 · AS34762 Combell NV

Reputation 64/100 wrong cert weak security headers dmarc monitor-only

Classifying

HTML metadata

Title: Hoogwaardige verf, schildersbenodigdheden en reparatiemiddelen | Sikkens Center
Description: √ Kwaliteitsmerken rechtstreeks vanaf de fabrikant √ Gratis bezorging vanaf 50 euro √ Voor 20.00 uur besteld, vandaag verzonden
Language: nl
Canonical: https://www.sikkenscenter.nl/

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Cookie consent

Cookiebot
OneTrust

Fonts

Google Fonts

Third-party hosts loaded (7)

cdn.cookielaw.org×2
js.adsrvr.org×2
a.storyblok.com×1
consent.cookiebot.com×1
fonts.googleapis.com×1
static.klaviyo.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.akzonobel.com
ns2.akzonobel.com
ns3.akzonobel.com

MX

1 sikkenscenter-nl.mail.protection.outlook.com

TXT

klaviyo-site-verification=X5KfeM

Verified for

Google
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf1.akzonobel.com include:sendgrid.net include:spf.mandrillapp.com -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none

policy: none (monitoring only) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyzqCCXV10ipzQKgtAIS40geMFc3RskHp6etmvMt9Y/VegS1OvvQ0oDeIBaIlYBfwEGQNGbmPktzAd…

selectors probed

Certificate (current) wrong cert

from 2026-04-24 to 2026-07-23

Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.sikkenscenter.nl/

present

content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: ALLOW-FROM app.storyblok.com, ALLOW-FROM storyblok.com
x-content-type-options: nosniff
content-security-policy-report-only: font-src cash-f.squarecdn.com fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.storyblok.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ * www.google.com maps.googleapis.com insight.adsrvr.org *.addthis.com 'self' 'unsafe-inline';