unicef.nl

HTML metadata

Title: Voor ieder kind | UNICEF
Description: UNICEF is de officiële kinderrechtenorganisatie van de Verenigde Naties. Alle kinderen, waar ook ter wereld, hebben dezelfde fundamentele rechten. UNICEF beschermt deze rechten en zorgt ervoor dat het kinderrechtenverdrag wereldwijd wordt nageleefd.
Language: nl
Canonical: https://www.unicef.nl

Open Graph

url: https://www.unicef.nl
title: UNICEF
site name: UNICEF
description: UNICEF helpt elk jaar miljoenen kinderen. We bieden hulp bij acute nood én hulp op de lange termijn.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (4)

app-sncu01saas51g0rp001.cms.optimizely.com×17
cdn.optimizely.com×1
consent.cookiebot.com×1
www.googletagmanager.com×1

Social

Contact

Phone

DNS records live

NS

ns0.claranet.com
ns1.clara.net
ns2.claranet.com

MX

0 unicef-nl.mail.protection.outlook.com

TXT

Show 6 TXT records

MS501665
linkedin-site-verification=57773915-cdc6-41d7-a77c-4c1c221e2347
msfpkey=8606ea8oqf46hridfrnlxjwo
mandrill_verify.
oiILsjFOc7ESCwVBPx6WRgAONjfmivWjng044jDb1Dcx
mandrill_verify.OXm6vSnr1HlbaaH5Ohesvw

Verified for

Brevo
Dynamics 365
Google
Meta
Microsoft 365
Miro
Pinterest

Email authentication strong

SPF

v=spf1 include:_s00270218.autospf.email -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:rua@dmarc.brevo.com

policy: quarantine

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNPgIFF1zFcoNQAUOtCYs1NRPA8PeTz+IgrXd4JMdA2LtciZpQtSpUT1Y26yEAuIzbDKZg9EwUpjv5buPx5U…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUpeo2Xe0G3fpVe/JdD+ImZIm11fI6fek1RpP5T+cM+E2tORegGgbk/QFwmj7aTGNXuwZCWD9oTtvx2ce7…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCn1jYYRZkEjkRovX/vjLTWqldq8qi81BKfMu4/VQtTRCN+mRCW3l7IzPg1qhf8zwkZ9bqpFvNn6pAc1b35XsxJT+…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-03-11 to 2026-09-02

Expires in 93 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.unicef.nl/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://www.youtube.com https://*.azureedge.net https://www.googletagmanager.com https://code.jquery.com/jquery-3.7.1.min.js 'unsafe-eval' https://*.cookiebot.com https://googleads.g.doubleclick.net https://snap.licdn.com https://connect.facebook.net https://s.pinimg.com https://sc-static.net https://bat.bing.com https://www.redditstatic.com https://static.ads-twitter.com https://*.hotjar.com https://cdn.leadinfo.net https://analytics.tiktok.com https://d1igp3oop3iho5.cloudfront.net https://*.adscience.nl https://secure.adnxs.com https://www.tag4arm.com https://tr.snapchat.com https://ct.pinterest.com https://*.unicef.nl https://*.optimizely.com https://www.clarity.ms https://*.clarity.ms ; style-src 'self' 'unsafe-inline' https://api.mapbox.com/mapbox-gl-js/ https://*.azureedge.net https://fonts.googleap
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin