indexo.dev

vrijwilligerslelystad.nl

.nl crawl

First seen 2026-05-31 · Last seen 2026-06-03 · ok HTTP/1.1 200 1013 ms crawled 2026-05-31

US · 104.21.60.218 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Vrijwilligerscentrale Lelystad
Description
Vrijwilligerscentrale Lelystad helpt je bij het vinden van vrijwilligerswerk dat bij jou past. Bekijk vacatures, meld je aan voor activiteiten en maak impact in je stad.
Language
nl

Open Graph

ttl
2169614
url
https://www.vrijwilligerslelystad.nl/
title
homepage
locale
nl_NL
site name
Vrijwilligerscentrale Lelystad

Technology

CDN
Cloudflare
Analytics
  • Google Tag Manager

Third-party hosts loaded (2)

  • cdn.onesignal.com×1
  • www.googletagmanager.com×1

Social

DNS records live

NS
  • kellen.ns.cloudflare.com
  • nataly.ns.cloudflare.com
MX
  • 10 c9symr5z0.mx.service.one
TXT
  • mandrill_verify.qVyklIO2RNVoPvqZbaLFUQ

Email authentication strong

SPF
v=spf1 a mx include:spf.mandrillapp.com include:_spf.hostnet.nl -all
strict (-all)
DMARC
v=DMARC1; p=reject;
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-05 to 2026-07-04
Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.vrijwilligerslelystad.nl/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(), camera=(), document-domain=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=(), sync-xhr=(self)
x-content-type-options
nosniff
content-security-policy
default-src 'self' data: ; script-src 'self' 'report-sample' 'unsafe-eval' 'unsafe-inline' *.cloudfront.net *.google-analytics.com ssl.google-analytics.com www.google.com www.googleadservices.com www.googleoptimize.com *.googletagmanager.com www.gstatic.com tagmanager.google.com maps.googleapis.com *.doubleclick.net connect.facebook.net *.landbot.io webchat.digitalcx.com *.hotjar.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com cdn.jsdelivr.net code.jquery.com onesignal.com cdn.onesignal.com ads.creative-serving.com googleads.g.doubleclick.net *.monsido.com js-agent.newrelic.com bam.eu01.nr-data.net nonce-3f0b1ea0 ; style-src 'self' 'report-sample' blob: 'unsafe-inline' *.cloudfront.net fonts.googleapis.com cdn.jsdelivr.net onesignal.com cdn-images.mailchimp.com translate.googleapis.com *.landbot.io nonce-3f0b1ea0 ; img-src 'self' data: blob: ssl.gstatic.com www.gstatic.com *.google-analytics.com *.google.com *.google.nl *.google.de *.google.be *.g.doubleclick.net maps.gstatic.com *
strict-transport-security
max-age=63072000; includeSubDomains preload

Links to (5)

Linked from (2)