indexo.dev

tophuis.nl

.nl crawl

First seen 2026-05-19 · Last seen 2026-05-31 · ok HTTP/1.1 200 33156 ms crawled 2026-05-25

NL · 45.82.188.246 · AS31477 Duocast B.V.

Reputation 89/100 weak security headers dmarc monitor-only

sector real estate type homepage

HTML metadata

Title
tophuis.nl – hét platform voor woningpromotie
Language
nl-NL
Generator
WordPress 6.9
Canonical
https://www.tophuis.nl/
Feeds

Technology

Server
LiteSpeed
CMS
WordPress 6.9
PHP
8.3.30 security-only
jQuery
3.7.1
Fonts
  • Google Fonts
Social widgets
  • YouTube Embed
Third-party hosts loaded (8)
  • huispresentatie.nl×84
  • cdn.jsdelivr.net×2
  • fonts.googleapis.com×2
  • cdn.gtranslate.net×1
  • cdnjs.cloudflare.com×1
  • fonts.gstatic.com×1
  • gmpg.org×1
  • www.youtube.com×1

Social

Contact

Email
Phone

DNS records live

NS
  • ns1-04.azure-dns.com
  • ns2-04.azure-dns.net
  • ns3-04.azure-dns.org
  • ns4-04.azure-dns.info
MX
  • 10 mx1.emailsrvr.com
  • 20 mx2.emailsrvr.com
Verified for
  • Google

Email authentication partial

SPF
v=spf1 include:emailsrvr.com include:_spf.smtp.com include:enchanthq.net ~all
softfail (~all)
DMARC
v=DMARC1; p=none; fo=1
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-04-11 to 2026-07-10
Expires in 39 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.tophuis.nl/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (2)

Linked from (17)