visitleeuwarden.com

HTML metadata

Title

De bezoekerswebsite van Leeuwarden | Visit Leeuwarden

Description

Een bezoek aan Leeuwarden wordt een citytrip om nooit te vergeten! Benieuwd naar de leukste hotspots? Laat je inspireren en ontdek Leeuwarden!

Language

nl

Canonical

https://www.visitleeuwarden.com/nl

Translations

de
en
nl

Open Graph

title: De bezoekerswebsite van Leeuwarden
site name: Visit Leeuwarden

Technology

CMS: Joomla

Analytics

Google Tag Manager

Third-party hosts loaded (2)

assets.plaece.nl×40
www.googletagmanager.com×1

Social

Registration

Registrar

Key-Systems GmbH

Created

2015-07-27

Expires

2026-07-27 54 days left

Updated

2025-11-30

Name servers

nsauth1.bit.nl
nsauth2.bit.nl
nsauth3.bitnl.eu

DNS records live

NS

nsauth1.bit.nl
nsauth2.bit.nl
nsauth3.bitnl.eu

MX

10 visitleeuwarden-com.mail.protection.outlook.com

TXT

q2Ho1PLFrMYaNOwU+jyI6caUgPaWY4wbxOQL2PS7jxVxwHSa6R3rMebRkgc1d8qTnomJ1exVa3E6zbqOyDNtEw==

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 a mx ip4:145.87.1.129 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:dmarcreports@sharedservicecentrum.nl; adkim=s; aspf=s;

policy: quarantine · sp=quarantine

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7EX3cCdNp5i+5ltNEmTHTXPTSVDd3GVzltWVIUyzjy06bDK+t4DSIYypeHP8ik1Hc6pGYN6y9ZrgHInlNbL…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCyR/5M8JRzEfixogmI2RTXaMxe0waXVeOKy3kgD9VgpxVj45+WwErA7rK3Bi9EsgADL8QRTZf2Q80F2CPQ/N…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscQ1dgwUV7rMwpRG+cQSFkSXLa104s4DvLrDZyAVAmOB960CSXiLzL4R6QS2MkgxCn2sgq+aX97DKBoqye…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQ/gSkxjVcck21rcy3fuRsOrlIFY4kLr1Jf9S+cAxP9WpkQjqtltko08xR+ve9ouzo5AnlgyTz8OyzheeF38oLWd…

selectors probed

Certificate (current)

R13

from 2026-05-21 to 2026-08-19

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.visitleeuwarden.com/nl

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=*, autoplay=*, accelerometer=(), camera=(), microphone=(), usb=(), gyroscope=(), magnetometer=()
x-content-type-options: nosniff
content-security-policy: default-src https: 'unsafe-inline' 'unsafe-eval' data: blob:; block-all-mixed-content; connect-src * blob:; font-src https:; frame-ancestors 'self' https://preview.plaece.nl; frame-src *; img-src https: data: blob:; media-src https: data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; report-uri /nelmio/csp/report; worker-src https: blob:
strict-transport-security: max-age=315360000