vrln.nl

HTML metadata

Title

Welkom bij Veiligheidsregio Limburg-Noord | Veiligheidsregio Limburg-Noord

Language

nl

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://www.vrln.nl/

Translations

nl

Technology

CDN: Cloudflare
CMS: Drupal
PHP: 8.1.34 end of life

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

cdn-eu.readspeaker.com×1
fonts.googleapis.com×1
fonts.gstatic.com×1
www.googletagmanager.com×1

DNS records live

NS

ns.systemec.nl
ns2.systemec.nl
ns3.systemec.nl
ns4.systemec.nl

MX

10 vrln-nl.mail.protection.outlook.com

TXT

Show 4 TXT records

tHwUOOCBPWledPBNi2Ed6Bc5MighG/NnUAI90fF3J+8=
have-i-been-pwned-verification=49b10f7eae44e0e3e69449ed37c51b55
DomainVerification=LKQP2W19VCV04C36DZJFBYN0V08SY4IWNDKF6E32RB0V07QSHPVVKXLZSQ0KKU8D
/kGSrrxAOqn/U3o6UitmbYtWDiV9gAnzxcmQWhgvuaTkO3lsV8bvGnAO/+eUIaxb7NplDdxM8Neur3xAbg6zCg==

Verified for

Apple
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:87.233.184.166 ip4:31.7.7.130 ip6:2a03:9700:8000:0:0:0:0:130 ip4:89.20.87.0/24 ip4:136.144.169.189 ip4:83.219.84.233 ip4:31.7.7.130 ip4:89.20.87.0/24 ip4:136.144.169.189 include:spf.aksi.nl a:mail.raetonline.nl include:sendgrid.net include:servers.mcsv.net include:spf.topdesk.net include:spf.protection.outlook.com include:_spf.zivver.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; aspf=r; adkim=r; fo=s; rua=mailto:postmaster@vrln.nl; ruf=mailto:postmaster@vrln.nl

policy: quarantine · sp=quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrenKWQyGl+5/wFNkeb3cq8lfFQ1w0JwTZxv2L6OTZ7vm8MW7DL51h74BvchTIpBxUr488BE1KEpm4n3o4R5…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCZiMIv3HUgX3oLAhhBBoP5nHgkO8/Bq9eDQf8WtLM2sxuN4oGkkwHLOtsuonbjERzMUD/fViaq6PewK/Pw/g…

selectors probed

Certificate (current)

R13

from 2026-04-01 to 2026-06-30

Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.vrln.nl

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.google-analytics.com; connect-src 'self' *.google-analytics.com https://cdn-eu.readspeaker.com https://app-eu.readspeaker.com https://vttts-eu.readspeaker.com https://media-eu.readspeaker.com https://wrapi-eu.readspeaker.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' *.youtube.com *.vimeo.com *.twitter.com https://cdn-eu.readspeaker.com https://app-eu.readspeaker.com; img-src 'self' data: https://*.global.siteimproveanalytics.io https://*.tile.openstreetmap.org/ https://i.ytimg.com/ https://unpkg.com https://*.twimg.com/ https://platform.twitter.com/ https://syndication.twitter.com/ *.google-analytics.com https://cdn-eu.readspeaker.com https://tile.openstreetmap.org https://www.google-analytics.com https://www.googletagmanager.com; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://platform.twitter.com/ https://cdn.syndication.twimg.com/timeline/ http
strict-transport-security: max-age=31536000; includeSubDomains; preload