smaakvandemaasheggen.nl — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Streekproducten & pakketten - Smaak van de Maasheggen
Description: Onder het label Smaak van de Maasheggen worden heerlijke streekproducten gemaakt én verkocht. Van verfrissend bier en verrukkelijke gin tot fruitige sappen en opmerkelijke siropen.
Language: nl
Canonical: https://www.smaakvandemaasheggen.nl/home/

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Registration

Registrar

CYBOX Internet & Communicatie

Created

2023-01-17

Updated

2023-03-07

Name servers

ns2.cybox.eu
ns1.cybox.nl

DNS records live

NS

ns1.cybox.nl
ns2.cybox.eu

MX

10 mx.spamexperts.com
20 fallbackmx.spamexperts.eu
30 lastmx.spamexperts.net

Email authentication strong

SPF

v=spf1 include:_spf.cybox.email -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@cybox.nl; ruf=mailto:dmarc-reports@cybox.nl;

policy: quarantine

DKIM

default: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnJ9gXOvnDBFjoeBEsJM0nnbMYu/iKEHG4FvKp01+zejM0tnC7ixCx/vLObCmrZi+r/XtWDE83LnC7nbnh6sJ…
k1: v=DKIM1; s=email; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ow2km0bvykgY0lnksxGx0MfFYNTwgm1t88GexlYE+YVj24cIzqavOgUcrGH4EulyKrAe…

selectors probed

Certificate (current)

R13

from 2026-04-08 to 2026-07-07

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.smaakvandemaasheggen.nl/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.typekit.net; script-src 'self' *.googletagmanager.com *.google-analytics.com 'unsafe-eval' https://*.googleapis.com *.typekit.net 'nonce-5G6O038+5NfjBbEko+/Dbw=='; img-src 'self' data: i.ytimg.com i.vimeocdn.com *.googletagmanager.com *.google-analytics.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com *.typekit.net; frame-src 'self' www.youtube.com player.vimeo.com *.google.com; connect-src 'self' *.analytics.google.com *.googletagmanager.com *.google-analytics.com https://stats.g.doubleclick.net https://*.googleapis.com *.google.com https://*.gstatic.com data: blob: performance.typekit.net; base-uri 'self'; font-src 'self' fonts.gstatic.com *.typekit.net; frame-ancestors 'self';
strict-transport-security: max-age=63072000; includeSubDomains