vakantieweerribbenwieden.nl

.nl crawl

First seen 2026-06-04 · Last seen 2026-06-04 · ok HTTP/1.1 200 175 ms crawled 2026-06-04

US · 34.117.233.114 · AS396982 Google LLC

Reputation 100/100

Classifying

HTML metadata

Title: Weerribben-Wieden in Overijssel - Officiële website
Description: Uw vakantie begint bij Vakantieparken Weerribben Wieden. Zoek en boek in het gebied Weerribben Wieden. Vakantieparken Weerribben Wieden heeft 4 vakantieparken.
Language: nl
Canonical: https://www.vakantieweerribbenwieden.nl/

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (5)

newyse-res.cloudinary.com×14
cdn-wee-cms.maxxton.net×3
res.cloudinary.com×2
cdnjs.cloudflare.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.yourwebhoster.com
ns2.yourwebhoster.com
ns3.yourwebhoster.nl
ns4.yourwebhoster.nl

MX

0 vakantieweerribbenwieden-nl.mail.protection.outlook.com

Email authentication strong

SPF

v=spf1 ip4:109.71.54.147 +include:relay.mailchannels.net +include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;sp=reject;adkim=r;aspf=s;pct=100;fo=0;rf=afrf;ri=86400

policy: reject (enforced) · sp=reject

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU0GQD5DYcCgJnoAkuxaf9u+t783WbHXY2jh415ygDrhUJGkCitQdawVtt+W9n8gJC6XXSdlS/VGLB…

selectors probed

Certificate (current)

WR1

from 2026-04-15 to 2026-07-14

Expires in 39 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.vakantieweerribbenwieden.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors 'self'
strict-transport-security: max-age=31536000; includeSubDomains; preload