terrasana.nl

.nl crawl

First seen 2026-05-25 · Last seen 2026-06-01 · ok HTTP/1.1 200 3393 ms crawled 2026-05-29

US · 75.2.115.29 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: TerraSana - biologisch eten en duurzame producten
Description: TerraSana werkt aan een gezonde aarde. Wil jij genieten van puur en biologisch eten? Ons assortiment van 400+ TerraSana producten is bio en 99,7% vegan.
Language: nl
Canonical: https://www.terrasana.nl/

Open Graph

url: https://www.terrasana.nl/
title: TerraSana - biologisch eten en duurzame producten
description: TerraSana werkt aan een gezonde aarde. Wil jij genieten van puur en biologisch eten? Ons assortiment van 400+ TerraSana producten is bio en 99,7% vegan.

Technology

Server: nginx
CMS: Gatsby
JS framework: React

Analytics

Google Tag Manager
Plausible

Third-party hosts loaded (4)

media.terrasana.com×6
js.hs-scripts.com×1
plausible.io×1
www.googletagmanager.com×1

Social

DNS records live

NS

xt-ns-02.xertog.com
xt-ns-03.xertog.com
xt-pp-01.xertog.com

MX

0 terrasana-nl.mail.protection.outlook.com

TXT

x5fQ1yQLXkthwR93tVPmSS4JGFVIeDmx
amazonses:hfccRp2HLaXbAeHOVfxNpsqGF3yaheOizvXeEj6StmU=

Verified for

Google
Meta
Microsoft 365

Email authentication partial

SPF

v=spf1 +a +mx include:7378467.spf07.hubspotemail.net include:spf.protection.outlook.com include:amazonses.com ip4:185.36.134.216 ip4:185.36.134.217 ip4:185.36.133.178 ip4:37.74.96.132/30 -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-05-08 to 2026-11-22

Expires in 172 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.terrasana.nl/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src * data: 'unsafe-eval' 'unsafe-inline'

Links to (7)

Linked from (2)

better-events.nl×1
bionederland.nl×1