visitlimburg.be

HTML metadata

Title

Alle toeristische info voor je trip naar Limburg | Visit Limburg

Description

Op zoek naar natuur, rust en belevenissen? Ontdek Limburg en alle informatie over toerisme, logeren, fietsen, wandelen en nog zoveel meer. Beleef Limburg!

Language

nl

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://www.visitlimburg.be/nl

Translations

de
en
fr
nl

Open Graph

url: https://www.visitlimburg.be/nl/alle-toeristische-info-voor-je-trip-naar-limburg-visit-limburg
title: Limburg
site name: Visit Limburg
description: Even weg? Altijd Limburg!

Technology

Server: nginx
CMS: Drupal

Fonts

Google Fonts

Third-party hosts loaded (4)

developers.google.com×2
maps.googleapis.com×2
fonts.googleapis.com×1
fonts.gstatic.com×1

Social

DNS records live

NS

ns1.combell.eu
ns3.combell.net
ns4.combell.net

MX

10 mx.mailprotect.be
50 mx.backup.mailprotect.be

Verified for

Google
Meta

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

E7

from 2026-04-03 to 2026-07-02

Expires in 32 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.visitlimburg.be/nl

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: ALLOW-FROM https://brandedcontent.hln.be
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://api.easygis.eu *.cloudflare.com *.google.com https://www.gstatic.com *.instagram.com/embed.js http://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.jsdelivr.net https://snap.licdn.com https://unpkg.com *.shoppingminds.com *.shoppingminds.net *.cookie-script.com *.getresponse.com us-an.gr-cdn.com *.newrelic.com *.facebook.net *.instagram.com/embed.js https://us-wbe.gr-cdn.com *.gr-wcon.com *.hotjar.com cirklo-cdn.s3.eu-central-1.amazonaws.com *.pinimg.com *.pinterest.com; object-src 'self'; style-src 'self' 'unsafe-inline' http://*.altijdlimburg.com http://*.visitlimburg.be cdn.visit-limburg.ddev.site https://fonts.gstatic.com *.googleapis.com https://api.easygis.eu *.cloudflare.com *.google.com https://cdn.jsdelivr.net *.gstatic.com *.bunny.net; img-src 'self' http://*.altijdlimburg.com http://*.visitli
strict-transport-security: max-age=2592000