snowworld.com

HTML metadata

Title

SnowWorld, indoor ski slopes | SnowWorld

Description

SnowWorld offers real snow, thrilling slopes and year-round winter fun for all ages. Your ultimate winter escape close to home.

Language

en

Canonical

https://www.snowworld.com/en

Translations

de
en
fr
nl

Open Graph

url: https://www.snowworld.com/en
title: SnowWorld, indoor ski slopes
site name: SnowWorld
description: SnowWorld offers real snow, thrilling slopes and year-round winter fun for all ages. Your ultimate winter escape close to home.

Technology

CDN: Amazon CloudFront
CMS: Nuxt

Analytics

Google Tag Manager

Third-party hosts loaded (5)

d2e28pw8h97kj5.cloudfront.net×9
cdn.sanity.io×1
connect.getflowbox.com×1
maps.googleapis.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

NameWeb BVBA

Created

2001-01-24

Expires

2026-10-09 141 days left

Updated

2025-10-07

Name servers

ns1.bhosted.nl
ns3.bhosted.nl
ns4.bhosted.nl

DNS records live

NS

ns1.bhosted.nl
ns3.bhosted.nl
ns4.bhosted.nl

MX

1 snowworld-com.mail.protection.outlook.com

TXT

bHosted.nl - http://www.bhosted.nl

Verified for

Apple
Atlassian
Brevo
Google
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.snowworld.com.eu-ltnjf8wu.e1.dspf.app ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:ltnjf8wu@ag.eu.dmarcadvisor.com; ruf=mailto:ltnjf8wu@fr.eu.dmarcadvisor.com

policy: reject (enforced)

DKIM

Show 6 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCjplrfSTvELPa4Qf+JCeA2QxJbUJDRTrawgpN3VyU0x+IBEbPlPV42b6kyEa1Z4zmwtIu9jKIqh4kvBZVEB3…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8epgnlHLFfMTYIDs15VEM2cJJgSmLxRB2qAqr/VX5dRd0OuasOOAcjU+xbaVsz/LH6DTdXZVd6Lcc+…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM0/RyUN8ctxBOvUwIFey815AJa4G+IlBDF6icCEroGNKBSroSpIe6d+/ohJ4WT0cnMK/kPNpye6LjpAj/…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0/pMCWcZpIWbUOgn2atofIAUC9+nn34tOgC4otjrNWgfKYiiPbUB1RpRPilizxXK9NIm3Z9BEFgCK4HZFxQ05Ys…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-10-13 to 2026-11-12

Expires in 175 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.snowworld.com/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https: http:; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; upgrade-insecure-requests; connect-src 'self' https: http:; frame-src 'self' https:;
strict-transport-security: max-age=15552000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: same-origin