thuisarts.nl

HTML metadata

Title: Thuisarts | De eerste plek waar je het checkt.
Description: Thuisarts geeft betrouwbare informatie over gezondheid en ziekte, gemaakt door (huis)artsen.
Language: nl
Generator: Drupal 11 (https://www.drupal.org)
Canonical: https://www.thuisarts.nl/

Open Graph

url: https://www.thuisarts.nl/home
site name: Thuisarts

Technology

Server: nginx
CMS: Drupal

Third-party hosts loaded (1)

cdn-eu.readspeaker.com×2

Social

DNS records live

NS

ns1.as41887.nl
ns2.as41887.eu
ns3.as41887.io
ns4.as41887.it

MX

10 thuisarts-nl.mail.protection.outlook.com

Verified for

Atlassian
DocuSign
Figma
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a mx include:spfinc.prolocation.net include:spf.protection.outlook.com ip4:194.165.34.0/24 ip4:94.228.136.113 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCNkr5cYT4kGFWum2aOA5VZq9MCnCtDOMwmKaKWEtObGzjmrKobP1j5dTeem7pUGEtyTRUhWxKkxTsluWKqVI…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6sfA4hhYuy1Farc42Y89yxCc4wkhhKXKUWsVhv2eDWo2PJVS84IB1ttEq/OWG1OWoPD8oN3d6pogm…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-07-27 to 2026-08-07

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.thuisarts.nl/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; child-src 'self' blob:; connect-src 'self' *.thuisarts.nl *.readspeaker.com bynder.nhg.org *.cloudfront.net https://*.ingest.de.sentry.io *.contentsquare.net *.contentsquare.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; font-src 'self' data: https://themes.googleusercontent.com *.cloudfront.net; frame-src 'self' *.readspeaker.com https://consentcdn.cookiebot.com; img-src 'self' data: *.thuisarts.nl *.readspeaker.com *.cloudfront.net https://bynder.nhg.org *.contentsquare.net; media-src 'self' *.thuisarts.nl *.readspeaker.com; script-src * 'report-sample' 'unsafe-inline'; style-src * 'report-sample' 'unsafe-inline'; base-uri 'self'; form-action 'self' *.thuisarts.nl https://nhglsk-staging.netlify.app; frame-ancestors 'self' *.asterisque.nl *.cnsconnect.nl *.crsinternet.nl *.curasoft.nl *.dataleaf.eu *.eposzilos.nl *.extenzo.nu *.healthconnected.nl *.omnihis.nl *.oscarecd.nl *.portavita.eu *.portavita.nl *.promedico-asp.aw *.promedico-asp.nl *.to
strict-transport-security: max-age=31536000, max-age=31536000; includeSubDomains
content-security-policy-report-only: default-src 'self'; child-src 'self' blob:; connect-src 'self' *.thuisarts.nl *.readspeaker.com bynder.nhg.org *.cloudfront.net https://*.ingest.de.sentry.io *.contentsquare.net *.contentsquare.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; font-src 'self' data: https://themes.googleusercontent.com; frame-src 'self' *.readspeaker.com https://consentcdn.cookiebot.com; img-src 'self' data: *.thuisarts.nl *.readspeaker.com https://bynder.nhg.org *.contentsquare.net; media-src 'self' *.thuisarts.nl *.readspeaker.com; script-src 'self' 'report-sample' *.readspeaker.com *.thuisarts.nl *.cloudfront.net *.contentsquare.net app.contentsquare.com https://consent.cookiebot.com https://consentcdn.cookiebot.com cdn-eu.readspeaker.com https://d8ejoa1fys2rk.cloudfront.net; style-src * 'report-sample' 'unsafe-inline'; base-uri 'self'; form-action 'self' *.thuisarts.nl https://nhglsk-staging.netlify.app; frame-ancestors 'self' *.asterisque.nl *.cnsconnect.nl *.crsinternet.nl *.cura