vorm.nl

HTML metadata

Title: Homepage van VORM
Description: Specialist in vastgoed voor gebiedsontwikkeling vastgoedontwikkeling bouw transformeren verduurzamen renoveren en vastgoedonderhoud.
Language: nl

Open Graph

url: https://vorm.nl/api
title: Homepage van VORM
site name: VORM
description: Specialist in vastgoed voor gebiedsontwikkeling vastgoedontwikkeling bouw transformeren verduurzamen renoveren en vastgoedonderhoud.

Technology

Server: nginx
CMS: Next.js

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (2)

consent.cookiebot.com×1
www.googletagmanager.com×1

Social

Contact

Email

post@vorm.nl

DNS records live

NS

ns1.openprovider.nl
ns2.openprovider.be
ns3.openprovider.eu

MX

0 vorm-nl.a-v1.mx.microsoft

TXT

Show 5 TXT records

1b3d04d3-e34a-4c96-a34d-fd882cdf30ab
W79rpv5bsaVtDbz53V8IwQKuixF7URmE
_3kmvwu7wctv07vefheqfwirx6b7nsvi
hibp-verify=dweb_ajwf5rg3stra4i4o09zygqyt
_qtd60hcpeka1p8fz1riiop7w8hkzz5v

Verified for

Google

Email authentication strong

SPF

v=spf1 ip4:195.189.23.246 ip4:77.74.54.75 ip4:77.74.54.216 ip4:80.95.170.195 ip4:46.31.48.0/21 ip6:2001:4c10:504:0:80:95:160:62 include:_spf.intermax.nl include:spf.hdconnect.nl include:spf.provalue.nl include:spf.protection.outlook.com include:spf_core.nbo.nl include:mailswitch.nl include:spf.mandrillapp.com include:spf.mailjet.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; adkim=r; fo=1; ri=604800; rua=mailto:dmarc@vorm.nl; ruf=mailto:dmarc@vorm.nl

policy: quarantine · sp=quarantine

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/Fp0qrTe3rR9taqbxYG4k/ABqnAbl2uxSc3Y5tKtMmQbiaTExNFtSaSEiutoOUrMW1xM/h9uR3bDisVe5Tg…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9EMwAOpk6sj9zcTwdaAs+00FaENzMSBVbL3wcu0x0tKaBOE6pVavlmNQMYrzm72j0EBqatj5qi55xlVqj…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzgU6ripJGHQBYxMjQhJxmPKMBkNqxaTI6IO3bo+7LuHcZorWTwTva8sNyPg2sUXJyHTnxfXrNmMRJRJ7j…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-05-27 to 2026-12-06

Expires in 188 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://vorm.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: microphone=(), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com/ https://connect.facebook.net/ https://www.google.com/recaptcha/api.js https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://woningen.homedna.nl/ https://project.woonmodule.nl/ https://*.sentry-cdn.com/; frame-ancestors https://vorm.nl/ https://aanbod.vorm.nl/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://woningen.homedna.nl/; img-src 'self' data: https: blob: www.googletagmanager.com; font-src 'self' data: https://fonts.googleapis.com/ https://fonts.gstatic.com/; connect-src 'self' https://api.fundament.nl/ https://consent.cookiebot.com/ consentcdn.cookiebot.com/ https://vimeo.com/ https://*.google-analytics.com/ https://www.facebook.com/ https://*.sentry.io; child-src blob:; frame-src 'self' https://open.spotify.com/ https://www.googletagmanager.com/ https://www.google.com/ https://consentcdn.cookiebot.com/ https://player.vimeo.com/ https:
strict-transport-security: max-age=15768000