stichtinglvo.nl

HTML metadata

Title: Home | Stichting LVO
Language: nl

Open Graph

url: https://www.stichtinglvo.nl/home/
title: Home | Stichting LVO

Technology

Analytics

Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (2)

www.googletagmanager.com×1
www.youtube.com×1

Social

Contact

Email

info@stichtinglvo.nl

Phone

+31464201212

DNS records live

NS

ns0.transip.net
ns1.transip.nl
ns2.transip.eu

MX

10 stichtinglvo-nl.mail.protection.outlook.com

TXT

solarwinds-service0desk-verification=ab6dd52f097d32477d746736e363c526
yjTGUtquHMhlqrW7styCTiUk9N3TD1iJF1ytXGELfr+jYP8ncqqRBvjylIo/xuOqon/boF93z2TeF20CTkzdQA==
w754pxz52m2l8kyvdpds1yqp0lz4hy4w

Verified for

Apple
Google

Email authentication strong

SPF

v=spf1 include:_spf.samanage.com include:spf.protection.outlook.com include:spf.mailcamp.nl include:spf.bctcloud.eu include:email.bergop.net ip4:212.178.141.56 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:alerts@stichtinglvo.nl; ruf=mailto:alerts@stichtinglvo.nl; fo=1;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvkpFCCLGw/EZbT1JfB7OvSF7Bf3TUiCO9AN6fu0OKPAl5FZLLBhipkwoa+4oF7HYgWXXQU42ZpzK+CLpaO2…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-04-02 to 2026-10-18

Expires in 137 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.stichtinglvo.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' data:; style-src 'self' 'unsafe-inline' https://*.juicer.io https://use.typekit.net; font-src 'self' https://*.juicer.io https://use.typekit.net; object-src 'none'; frame-ancestors 'self'; connect-src 'self' https://stats.g.doubleclick.net https://tr.snapchat.com https://*.juicer.io https://*.crazyegg.com https://www.google-analytics.com https://www.googletagmanager.com https://region1.analytics.google.com https://region1.google-analytics.com https://consentcdn.cookiebot.com https://www.facebook.com https://www.google.com; form-action 'self'; base-uri 'self'; img-src 'self' data: https://i.ytimg.com https://*.juicer.io https://www.googletagmanager.com https://*.gstatic.com https://*.recaptcha.net https://stats.g.doubleclick.net https://imgsct.cookiebot.com https://api.maptiler.com https://www.google-analytics.com https://www.google.nl https://www.facebook.com; media-src 'self'; frame-src 'self' https://td.doubleclick.net https://tr.snapchat.com/ https://*.juicer.io h
strict-transport-security: max-age=31536000; includeSubDomains; preload